Arch Linux does have pip, npm and many other package managers in the official repos, which can be used to install external packages, many of which are user submitted. Why is an AUR helper any different?
Pulkit Krishna On Sat, Apr 25, 2026 at 11:53 AM David C Rankin <[email protected]> wrote: > > On 4/24/26 8:27 AM, Ralf Mardorf wrote: > > This isn't about education, it's about security. > > Agreed, > > The priority should be safeguarding the distribution against > sprawling dependencies outside the official distribution, and especially > in the current climate where lag time between identifying a bad package > and removing it can impact a large number in that supply chain. > > The KISS philosophy has served Arch well. > > People can use whatever AUR helper they like, but that doesn't mean > any particular help need be made part of the official distro. Ralf has > nailed the salient point. > > -- > David C. Rankin, J.D.,P.E.
