You are not logged in.
Should anything be done about the orphaned prebuilt AUR package installer paru-bin?
Doing it the Linux way since 1997 and Arch way since 2015 (and loving it!)
Platforms: Intel, ARMv6 (Raspberry Pi), ARMv7 (BeagleBone Black), ARMv8 (Raspberry Pi)
Languages: C, C++, ASM, Pascal & Java
Offline
Offline
isn't that about the point i made on the whole "security of aur" topic? "what about a software is finished and doesn't require any more updates?" or something similar?
why should the aur package get a "heartbeat" bump which may or may not conflict with future updates just for the sake of the heartbeat?
i still think this "auto-orphan/-delete" mechanism should be changed to something more active - like a dev/maintainer can toggle flags like "final version" or "no longer maintained/abandoned"
regular heartbeats would require at least bumping the pakrel - which, as far as i understand, isn't meant for such but rather like often done for the kernel when the build system got an update or something like this - so when something actually has changed
Offline
"what about a software is finished and doesn't require any more updates?"
Then you don't update it. There's no need to orphan it or anything.
Most, borderline all, -git packages fall into that category.
Offline