this post was submitted on 04 Aug 2026
82 points (97.7% liked)
Technology
86957 readers
3395 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
'Bring maintained by their dev' sounds kind of redundant. As long as you are not close with them that sounds like a bad take
As in the official GitHub or whatever repo they're using lists their aur package as an install message. So I'm not just downloading a potential clone/fake package with a similar name that could've been orphaned and taken over in the recent aur malware campaigns
tbh I do feel like it's somewhat relevant in this case since the packages that were compromised on the AUR were due to the AUR's package transfer ability for unmaintained packages
But you still will not be notified when this changes?
Admittedly the dev maintaining the aur sounds better than random person...