Mind if I ask... Does the "extra" repository have markedly different protocols around orphaning and adopting packages than the AUR does?
On August 7, 2026 7:32:42 AM MDT, kpcyrd <[email protected]> wrote: >On 8/7/26 8:32 AM, itisi wrote: >> On Thursday, 6 August 2026 18:23:16 CEST Bert Peters wrote: >> > To a large extent, this has already happened, and continues to happen. >>> The remaining entries are simply not eligible for inclusion in the >>> repoitories. >> >> Hi there, i was wondering, >> >> So currently users of Librewolf, Brave and Zen cannot upgrade these packages >> from the AUR, and therefore are now using vulnerable web browsers with known >> security related bugs. > >I've added librewolf to [extra] now. > >I believe reducing the amount of AUR packages people need is the most >effective way to deal with the inherent malware risk the AUR has. > >The librewolf AUR package had an epoch= set which I removed, so pacman won't >automatically pick this up and an explicit `pacman -S librewolf` is needed. > >Let me know if there's any problems besides that (e.g. by filing a bug in >gitlab). > >cheers, >kpcyrd
