Key Info

An OpenCode developer argues that as supply chain attacks grow, AUR needs to become more sophisticated or be replaced, since secure package publishing there is impossible.

Highlights

  • Frames supply chain attacks as an increasingly serious problem
  • Says AUR must evolve or be replaced
  • Asserts it is impossible to securely publish packages on AUR