Dear AUR Package Maintainers,
I am the upstream developer and maintainer of ForskScope (
https://github.com/forskscope/forskscope/ ) , an open-source diff and
merge GUI application written in Rust.
I currently maintain the source-built AUR package:
https://aur.archlinux.org/packages/forskscope
<https://aur.archlinux.org/packages/forskscope>
I would also like to maintain the corresponding binary package,
|forskscope-bin|, which is currently maintained by an unrelated contributor:
https://aur.archlinux.org/packages/forskscope-bin
<https://aur.archlinux.org/packages/forskscope-bin>
I sincerely appreciate the current maintainer's efforts in maintaining
this package. However, as the upstream developer, I would like to bring
both packaging variants under upstream maintenance to ensure consistent
releases, integration with our official CI/CD workflows, and proper
verification of distributed binaries.
This is also a software supply-chain security concern: maintaining a
package associated with our project outside upstream control makes it
difficult to establish a consistent and accountable release process. I
am not alleging any malicious activity or existing security compromise.
I respectfully request that the AUR Package Maintainers consider
transferring |forskscope-bin|to my AUR account, or advise me on the
appropriate official procedure.
I would prefer not to initiate direct communication or private
negotiations with the current maintainer. I would appreciate any
necessary coordination being handled through the appropriate AUR channels.
Thank you for your kindly reading.
--
Med vennlig hilsen,
@nabbisen
