I need delta updates.

[f33dm3bits]

The AUR is incredibly convenient, but that convenience comes with additional risk. Recently attackers compromised orphaned AUR packages with a malicious npm dependency.

AUR has the most inertia at this time, it would be worth fixing

The AUR was never secure to begin with, as they have always cautioned a warning it being a "User Repository" and to be used with caution.

AUR packages are user-produced content. These PKGBUILDs are completely unofficial and have not been thoroughly vetted. Any use of the provided files is at your own risk.

Arch User Repository - ArchWiki

Having read the aur-general mailinglist in the past 2 months it seems they are working on improving the security overal. We will see how that looks like when they open up registrations again.

 

[MikeWalsh]

Just as an 'aside' - and bearing in mind I'm not really familiar with either of 'em - would I be right in thinking the AUR is anything like Slackware's 'slackbuilds' system?

I believe I'm correct in stating that those are 'user-generated / created' as well, no?


Mike.

 

[//////]

Just as an 'aside' - and bearing in mind I'm not really familiar with either of 'em - would I be right in thinking the AUR is anything like Slackware's 'slackbuilds' system?

I believe I'm correct in stating that those are 'user-generated / created' as well, no?


Mike.

yea, you are correct.
i used slackware maybe 10 years ago.