News for hackers. Stuff that matters.

A comment on Arch Linux AUR Repository Found to Contain Malware. Parent comment

Re:Arch Linux AUR Repository Found to Contain Malware by tbrock on Tuesday July 10, 2018 @04:41PM (#17501959)
Yeah it would be better if the packages had all-time upvotes as well as “upvotes for this version”.
[ Parent | on HN ]
Re:Arch Linux AUR Repository Found to Contain Malware by tomswartz07 on Tuesday July 10, 2018 @07:25PM (#17503089)
Honestly, I don't see this happening.

Many packages use rolling versions from git commits, so while the PKGBUILDs don't get updated, any time a user re-runs makepkg on that PKGBUILD the latest commit is pulled and built.

In those cases, a PKGBUILD might be months or years old, but still consistently up to date and valid.

[ Parent | on HN ]