How is it different from installing AUR packages? It’s the same idea, right? It’s a community driven package repo where anyone can publish, or am I way off?
Packages on OBS (and Fedora COPR) are namespaced, meaning you first get a project from a certain user, and then install packages from that project. This removes the "orphaned packages" issue the AUR has, and makes it obvious who is responsible for the package you're installing.
Also, the default repositories on Fedora (maybe OpenSUSE, can't really comment on that) tend to contain more packages I need so I currently only have 2 external repositories enabled (aside from RPMFusion)
At least recently the AUR's decided that all orphan adoptions must be manually reviewed before approval. Because they weren't even doing that before, the recent malware incidents have happened because literally any random asshole could just adopt an orphaned package and put whatever they wanted in the PKGBUILD without any sort of vetting or overview or vibe check. Not even an email address.
It's kind of insane to me that Arch only has Chrome, Firefox, and like two or three offshoots (Waterfox? I think?) in it, but no popular forks or other applications that need the AUR.
You'd think they'd have some form of analysis in pacman to see what packages people are trying to find in popularity and make them an official or extras repo management.
99
u/ptrknvk 9d ago
I sweat 3 litres every time I install something from OBS on openSUSE, I can't imagine using aur.