On 8/8/26 11:12 AM, CraftingDragon007 wrote:
That's amazing so the 300+ people actively using it should just go about their day without security updates to their browser (except the people who really want to update it themselves), until the aur is finally reopened in soonTM



(Re-sending my below answer as I accidentally sent it as a response to the wrong mail)

Please, direct the blame to the right people.

Neither the unfortunate attack waves nor the fact that zen browser is not technically suitable for official repositories is Arch maintainers' fault. Don't make it an Arch Linux specific issue either, not including beta software in official distribution repositories is a pretty common rule. It's not like zen browser is currently widely distributed in other distributions' *official* repositories either [1].

On a side note, allow me to remind that there are certain expectations toward users when using the AUR. In theory, trivial "$pkgver" bump (which is seemingly the only thing that's needed to update the zen browser PKGBUILD to the latest version at the moment) shouldn't be an insurmountable blocker to perform on a small period of time while we're working on putting the platform back on track after such unfortunate and unpredictable events. I understand that is a delicate / annoying situation, but the fact that some users' personal workflow relies on zen browser which is a *beta* software and therefore defacto shipped via the *unofficial / unsupported* user repository (with all the potential consequences it may imply) is not something we can fairly be held responsible for in my opinion...

We're aware of the consequences of the AUR being in read-only / maintenance mode, it's unfortunate and we're sincerely sorry for the inconvenience. But please keep in mind that this is the result of a mass attack that we are suffering from as well. We're working hard and doing what we can to act on it as fast as possible (which, as a reminder just in case, is done on a volunteer basis).

This is painful for everyone. Please, bear with us and be comprehensive...

[1] https://repology.org/project/zen-browser/versions

Regards,
Antiz / Robin Candau

Attachment: OpenPGP_0xFDC3040B92ACA748.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to