Karna@lemmy.ml to Linux@lemmy.ml · 7 days agoArch Linux Users at Risk Again as AUR Hit by Another RATnews.itsfoss.comexternal-linkmessage-square33fedilinkarrow-up1130arrow-down14
arrow-up1126arrow-down1external-linkArch Linux Users at Risk Again as AUR Hit by Another RATnews.itsfoss.comKarna@lemmy.ml to Linux@lemmy.ml · 7 days agomessage-square33fedilink
minus-squareKarna@lemmy.mlOPlinkfedilinkarrow-up23arrow-down2·7 days agoFlatpak does have a concept of Verified Publisher. Many distros ship flatpak app store with default filter set to Verified Publisher only.
minus-squareCricket [he/him]@lemmy.ziplinkfedilinkEnglisharrow-up8·7 days ago Many distros ship flatpak app store with default filter set to Verified Publisher only. Also, if your distro doesn’t do this, you can do it yourself. You can modify, for instance, KDE Discover’s flathub repo to use the verified subset.
minus-squareDaniel Quinn@lemmy.calinkfedilinkEnglisharrow-up20·7 days agoThat sounds like a nice feature we could use for the Aur actually. We already have the votes value, but some sort of verification body could help rescue the Aur’s reputation.
Flatpak does have a concept of Verified Publisher. Many distros ship flatpak app store with default filter set to Verified Publisher only.
Also, if your distro doesn’t do this, you can do it yourself. You can modify, for instance, KDE Discover’s flathub repo to use the verified subset.
That sounds like a nice feature we could use for the Aur actually. We already have the
votesvalue, but some sort of verification body could help rescue the Aur’s reputation.