Man, it's 2026. When you say "orange asshole", you have to clarify.
this post was submitted on 14 Sep 2026
78 points (86.1% liked)
Linux
14986 readers
319 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 3 years ago
MODERATORS
AUR was never trustworthy. It leans very much towards the convenience end of the security-convenience spectrum.
This annoys me as well. And its not just AUR either, I hit this with pi.dev plugins, which are in NPM:
https://pi.dev/packages?name=permissions
Look how many duplicates there are, just because one person mildly changed am existing one, and never contributed back instead.
People are publishing their slop projects as if they intend on maintaining them, but they clearly aren't capable or willing to actually maintain them.
People are publishing their slop projects as if they intend on maintaining them, but they clearly aren’t capable or willing to actually maintain them.
This is my #1 problem with it. Just put it on github and call it a day. Don't act like its production ready at all. The #2 issue is namespace pollution.
this is the intended purpose of the AUR. it was never promised to be high quality or secure code, which is why there are warnings against using it if that is your concern. moth wonders why you complain about something you were told you must accept when using the AUR.
Its a common courtesy that if you publish something on the AUR, then you actually think people would use it and you plan to maintain it. You don't bother pushing some half baked afterthought to the AUR. Leave it on github. Otherwise you're just squatting a perfectly good AUR package name.
Why shouldn't they? They are using aur as intended, repository for user provided package recipes.
Exactly. The way I see it, AUR is the Wild West where anything goes. There are good, bad and ugly packages so you better know what you’re doing when installing those.
Sure, it's not against any rules, but it's at least rude to claim an AUR package name for some vibecoded app you spun up one afternoon and are not planning on maintaining. OP is just complaining about low quality software—"why not write low-quality software?", well sure, you are within your right to, but others are also within their rights to complain.
The only thing on the AUR is a recipe to build the package on arch. In a perfect world, the AUR contains a build recipes for every package in existence. It's always up to the user to be discerning about what they install on their system.