Karna@lemmy.ml to Linux@lemmy.ml · 2 days agoArch Linux Users at Risk Again as AUR Hit by Another RATnews.itsfoss.comexternal-linkmessage-square28fedilinkarrow-up1125arrow-down14
arrow-up1121arrow-down1external-linkArch Linux Users at Risk Again as AUR Hit by Another RATnews.itsfoss.comKarna@lemmy.ml to Linux@lemmy.ml · 2 days agomessage-square28fedilink
minus-squareKarna@lemmy.mlOPlinkfedilinkarrow-up22arrow-down2·2 days agoFlatpak does have a concept of Verified Publisher. Many distros ship flatpak app store with default filter set to Verified Publisher only.
minus-squareDaniel Quinn@lemmy.calinkfedilinkEnglisharrow-up19·2 days agoThat sounds like a nice feature we could use for the Aur actually. We already have the votes value, but some sort of verification body could help rescue the Aur’s reputation.
minus-squareCricket [he/him]@lemmy.ziplinkfedilinkEnglisharrow-up8·2 days ago Many distros ship flatpak app store with default filter set to Verified Publisher only. Also, if your distro doesn’t do this, you can do it yourself. You can modify, for instance, KDE Discover’s flathub repo to use the verified subset.
Flatpak does have a concept of Verified Publisher. Many distros ship flatpak app store with default filter set to Verified Publisher only.
That sounds like a nice feature we could use for the Aur actually. We already have the
votes
value, but some sort of verification body could help rescue the Aur’s reputation.Also, if your distro doesn’t do this, you can do it yourself. You can modify, for instance, KDE Discover’s flathub repo to use the verified subset.