Hi. Why exactly would being the upstream developer entitle you to maintain the 
downstream packaging over someone else?

That's generally not how things work in Linux distribution packaging and 
unrelated third parties doing it is the standard, and in fact it's preferable 
if you ask me, as upstream developers often think they know better when they 
don't, or they can also be malicious (see: xz).

Atte


On 2 November 2026 6.07.18 EET, nabbisen <[email protected]> wrote:
>
>Dear AUR Package Maintainers,
>
>I am the upstream developer and maintainer of ForskScope ( 
>https://github.com/forskscope/forskscope/ ) , an open-source diff and merge 
>GUI application written in Rust.
>
>I currently maintain the source-built AUR package:
>
>https://aur.archlinux.org/packages/forskscope 
><https://aur.archlinux.org/packages/forskscope>
>
>I would also like to maintain the corresponding binary package, 
>|forskscope-bin|, which is currently maintained by an unrelated contributor:
>
>https://aur.archlinux.org/packages/forskscope-bin 
><https://aur.archlinux.org/packages/forskscope-bin>
>
>I sincerely appreciate the current maintainer's efforts in maintaining this 
>package. However, as the upstream developer, I would like to bring both 
>packaging variants under upstream maintenance to ensure consistent releases, 
>integration with our official CI/CD workflows, and proper verification of 
>distributed binaries.
>
>This is also a software supply-chain security concern: maintaining a package 
>associated with our project outside upstream control makes it difficult to 
>establish a consistent and accountable release process. I am not alleging any 
>malicious activity or existing security compromise.
>
>I respectfully request that the AUR Package Maintainers consider transferring 
>|forskscope-bin|to my AUR account, or advise me on the appropriate official 
>procedure.
>
>I would prefer not to initiate direct communication or private negotiations 
>with the current maintainer. I would appreciate any necessary coordination 
>being handled through the appropriate AUR channels.
>
>Thank you for your kindly reading.
>
>
>-- 
>Med vennlig hilsen,
>@nabbisen

Reply via email to