On Sun, 2026-07-26 at 23:14 +0100, Lukas Grumlik wrote:
> Much of the current supply chain risk comes from users relying heavily
> on AUR helpers as automated middleman installers without reviewing
> what is being built. Transforming the AUR interface [snip] could help
> re-educate the community.

Are there any statistics showing that many people use the AUR with the
help of an AUR helper as if they were stupid and needed to be re-
educated? What makes you think that? I doubt this claim, but I can’t
back up my doubts with statistics.

What is certain, however, is that "the current supply chain risk comes
from" criminals who abuse the AUR, regardless of whether AUR users are
educated or uneducated.

It doesn't help to take drastic measures based on incorrect analyses.

Reply via email to