Hi Michael, so far, the AUR has worked very well based on the principle of "many eyes". What you're suggesting has been working exactly that way for a long time, just without nonsense like a score or gamification.
The attacks are annoying, but they were detected immediately upon occurring. As far as detection goes, there’s absolutely no reason to change anything. Why drive all those helpful eyes, who’ve noticed this so far, out of the AUR through scores and gamification? In any case, I suspect that Arch users are rarely fans of scores and gamification. But that doesn’t matter, because what works is that the attacks are detected, the malicious PKGBUILDs were probably not used very often, if at all. The real problem is the attacks themselves, not that they might go undetected. You’re trying to solve a problem that doesn’t need solving, since it’s been working reliably for a long time. Regards, Ralf
