Le 2026-07-24 à 13 h 05, [email protected] a écrit :
ChrisTX [1] filed an orphan request for thelounge [2]:
The author hasn't responded to the out-of-date notification or the
various issues (see the comments) that I and others pointed out.
As is, the package cannot be built in a chroot using `pkgctl build`,
has wrong license and pkgrel 0. I had posted a patch to resolve all
the various rule violations and issues the package has but the author
has refused to address or comment further on any of the points brought
up.
I should also say that the 4.5.0 version right now is being built with
a very outdated yarn.lock. Upstream only recently with 4.5.1 updated
it, but the 4.5.0 lock file shows **>140 high security
vulnerabilities** in yarn audit. The new one a fraction of that only.
I did warn about that, and that upstream did not recommend anywhere to
use the outdated lockfile and the upstream build instructions
specifically don't use it other than for development purposes.
I've been using thelounge for several years now, and I'm more than
willing to take over the package and maintain it thus.
[1] https://aur.archlinux.org/account/ChrisTX/
[2] https://aur.archlinux.org/pkgbase/thelounge/
I know this isn't how the AUR is supposed to work, but upstream uses
this repo https://github.com/thelounge/thelounge-archlinux which might
get more attention than AUR comments. If you submit your gist as a PR to
that repo I might still have enough maintainer access to accept it.
FYI 4.5.2 just got out as well.
