> I hope I'm not stepping on Judd's toes by answering, but the chances are
> roughly zero. You are aware, of course, that all packages in the
> directory you parse over are never deleted, so you could be scraping up
> something that a TU had deleted because it was malicious, or that may
> have been moved to [community], or elsewhere.
>

I'd expect people would check community and the repos before using the script.

But the fact that a malicious PKGBUILD isnt removed from the
server.....? Why not?

iphitus

--
iphitus - archck maintainer
Home:iphitus.loudas.com Blog: iphitus.blogspot.com

_______________________________________________
arch mailing list
[email protected]
http://www.archlinux.org/mailman/listinfo/arch

Reply via email to