3 ms·
>are too inconvenient for widespread adoption. The owners of AUR would do this for all packages they host so the inconvenience does not fall on other people. A
by charcircuit 3mo ago
>are too inconvenient for widespread adoption.
The owners of AUR would do this for all packages they host so the inconvenience does not fall on other people. AUR has to take responsibility over the security of what they offer.
- tempfile 2mo agoThe inconvenience is always with the person writing the package. When you restrict the build to a sandbox, if it fails, it's because the package actually depends on the thing the sandbox is limiting (usually network requests during the build). To fix this problem, the package has to change. This is why e.g. NPM does not roll out sandboxing.