On 2021-12-11 17:06 +0300 Caleb Maclennan via aur-dev wrote: >On 2021-12-11 13:37, Xyne via aur-dev wrote: >> I suggest that any automatic removal of orphans after x months be >> combined with >> 2 additional conditions: last download y months ago > >I would agree with this rule, but it also shows why this idea is also >unfeasible. >I can't think of any way you're going to be able to tell the difference >between >bots "downloading" packages and actual users. It's possible that >pkgstats.de >could be leveraged here, but even a zero number there may not be the >final answer >that is needed. > >Caleb
What about ignoring all downloads from a given address based on bot-like behavior such as downloading hundreds of packages in a short interval, or repeated download checks at fixed intervals? Any bot sweeping the AUR for info should be easy to spot server-side, and any bot downloading specific packages should probably be considered an indication of the package's continued usage when deciding to purge orphans. The automatic removal should remain conservative so I don't see it as an issue if some packages are accidentally flagged as still in use. They will simply require a human to review and manually delete them in that case. The automatic removal should still handle the bulk of it. Regards, Xyne
