Karna@lemmy.ml to Linux@lemmy.ml · 1 day agoArch Linux Users at Risk Again as AUR Hit by Another RATnews.itsfoss.comexternal-linkmessage-square24fedilinkarrow-up1110arrow-down13
arrow-up1107arrow-down1external-linkArch Linux Users at Risk Again as AUR Hit by Another RATnews.itsfoss.comKarna@lemmy.ml to Linux@lemmy.ml · 1 day agomessage-square24fedilink
minus-squareKarna@lemmy.mlOPlinkfedilinkarrow-up21arrow-down2·1 day agoFlatpak does have a concept of Verified Publisher. Many distros ship flatpak app store with default filter set to Verified Publisher only.
minus-squareDaniel Quinn@lemmy.calinkfedilinkEnglisharrow-up18·1 day agoThat sounds like a nice feature we could use for the Aur actually. We already have the votes value, but some sort of verification body could help rescue the Aur’s reputation.
minus-squareCricket [he/him]@lemmy.ziplinkfedilinkEnglisharrow-up7·1 day ago Many distros ship flatpak app store with default filter set to Verified Publisher only. Also, if your distro doesn’t do this, you can do it yourself. You can modify, for instance, KDE Discover’s flathub repo to use the verified subset.
Flatpak does have a concept of Verified Publisher. Many distros ship flatpak app store with default filter set to Verified Publisher only.
That sounds like a nice feature we could use for the Aur actually. We already have the
votesvalue, but some sort of verification body could help rescue the Aur’s reputation.Also, if your distro doesn’t do this, you can do it yourself. You can modify, for instance, KDE Discover’s flathub repo to use the verified subset.