On 10/29/26 14:01, Ramiro Rivera wrote: > Hi, Hello Ramiro,
> I'd like to report what looks like a leftover from the June > malicious-adoption wave, and ask for an account so I can take over the > affected package. > > Suspicious adoption > > - The account "kyralemarec" adopted libxdiff, php-xdiff and > screenpipe-bin within ten seconds on 2026-06-11 around 21:30 UTC. > - The screenpipe-bin git HEAD is still the previous maintainer's > (Jasmin, theblazehen) clean commit from 2026-03-17, but kyralemarec is > still listed as maintainer. The package has been flagged out of date > since 2026-06-23. > - The two xdiff packages may need the same check. Without an account you can’t check, but the "kyralemarec" account is inactive, which in this context means they’re banned. The package is clean because I force-pushed a git reset to it, and that’s why I’m listed as "Last Packager" See this [1] recent post from Claudia for more details. > > Request > > - Registration is closed, so I can't file the orphan request myself. > Could a Package Maintainer orphan screenpipe-bin, and could someone > create an AUR account for me (username "ramarivera", email > [email protected]) so I can adopt it? We don’t create accounts manually at the moment, sorry. > - I've also asked the previous maintainers about screenpipe-bin and > "screenpipe" (envolution, out of date since 2026-06-11). I'll forward > their replies to the list. > > Packaging track record: > https://github.com/ramarivera/screenpipe-desktop-bin, the current > Screenpipe desktop app with a daily automated update and test-build > workflow. We’re not too fond of auto-updating setups like this, at least it tries to build. And from a quick look at the PKGBUILD I noticed you have the package name in pkgdesc. From `man PKGBUILD`: Try to keep the description to one line of text and to not use the package’s name. > > Thanks, > Ramiro Rivera Best, Jonathan [1] https://lists.archlinux.org/archives/list/[email protected]/message/C4TYIWS4UL2MQRSTCKITYTDZ6DIUBPA3/
OpenPGP_signature.asc
Description: OpenPGP digital signature
