Why not add an account link requirement for package adoption? Say linking a Google, proton, or GitHub account as those are atleast a little more difficult to script into existence. For most people who have atleast one other account it wouldn't be an issue, but a script or attacker would have to create said accounts at the same time as the arch accounts. A side effect would be slowing down the rate a human attacker could create new accounts aswell.
On Wed, Jun 17, 2026, 10:05 a.m. Aaron Liu <[email protected]> wrote: > What do you mean by "register with Arch"? AUR already uses accounts. > > -- > Cheers, > Aᴀʀᴏɴ > >
