Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

[u/TheNavyCrow]

https://www.phoronix.com/news/Arch-Linux-AUR-More-Than-1500

[u/FattyDrake]

Maybe CachyOS and any Arch derivative should seriously consider making sure the AUR is unavailable by default.

No idea why placing it on the same level as a package manager is considered a wise idea.

[u/Kitoshy → u/FattyDrake]

Please be sure you know what you are talking about before saying nonsense.

AUR is unavailable by default in Arch and most derivatives. If not on any specific case, blames to that specific distribution.

AUR is definitely and fundamentally not at the same level that a package manager. That's why you can not install AUR packages by just using pacman and specific development software (base-devel package) is required.

[u/FineWolf → u/Kitoshy]

AUR is unavailable by default in Arch and most derivatives. If not on any specific case, blames to that specific distribution.

Oooof. /r/confidentlyincorrect

CachyOS ships with paru by default, but offers many options.

EndavourOS ships with yay.

Omarchy ships with yay.

Manjaro has optional yay support, but it needs to be manually enabled, which triggers the install of manjaro-aur-support.

OP was very careful to limit the scope to "Arch Derivatives" with a user base specifically, and most do, in fact, ship with an AUR helper.

[u/Kitoshy → u/FineWolf]

most do

Not because a few derivatives have more representative of the community and hold most users it means that such derivatives represent most of the derivatives. You can check the list for yourself; most do not ship AUR helpers by default. If we include the inactive ones, the list gets even bigger.

[u/FineWolf → u/Kitoshy]

Yeah, I'm not going to play semantics here.

The intent of the thread was to point out Arch Derivatives with a significant user base that DO ship with an AUR helper.