Package Details: aurman 2.22-1

Git Clone URL: https://aur.archlinux.org/aurman.git (read-only, click to copy)
Package Base: aurman
Description: AUR helper with almost pacman syntax
Upstream URL: https://github.com/polygamma/aurman
Licenses: MIT
Submitter: polygamma
Maintainer: polygamma
Last Packager: polygamma
Votes: 199
Popularity: 0.007675
First Submitted: 2018-03-20 21:31 (UTC)
Last Updated: 2023-05-14 20:28 (UTC)

Pinned Comments

Latest Comments

« First ‹ Previous 1 .. 6 7 8 9 10 11 12 13 14 15 Next › Last »

polygamma commented on 2018-06-17 10:16 (UTC) (edited on 2018-06-17 10:17 (UTC) by polygamma)

@Eschwartz - see: https://aur.archlinux.org/cgit/aur.git/commit/?h=aurman&id=2dc46d3f2ff2

eschwartz commented on 2018-06-17 06:28 (UTC)

Hey, now that pacman 5.1 with support for signed VCS sources should be broadly available and given that you use PGP-signing on the git release tags (as of the latest), could you please add ?signed to the git source and your validpgpkeys fingerprint.

I'd appreciate that for the -git version as well, but I'm not sure how feasible that is since the current HEAD commit is not signed. :/ It would require committing to always ensuring the current HEAD commit is signed.

This would address and exceed the requests mentioned a couple times before in the comments here, about doing checksum verification.

(Quick note to everyone in general: the checksums are meant to ensure download integrity, but git repositories already guarantee this, it's built into the git protocol. Verifying the code authorship is a different issue entirely, which checksums does not address but PGP does...)

Kewl commented on 2018-06-13 19:39 (UTC)

I like the fact this is in python with a readable code, very few dependencies, and actively maintained. good job.

andreyv commented on 2018-06-13 18:39 (UTC)

@polygamma: Thank you for your hard work.

polygamma commented on 2018-06-13 09:32 (UTC)

@Camponotus: https://github.com/falconindy/expac/pull/35

Camponotus commented on 2018-06-13 09:15 (UTC)

Thank you for the great aurman package! Why did you change the expac dependencies from expac to the AUR package expac-git?

Redi commented on 2018-06-13 08:26 (UTC)

Dunno I like aurman. It's fast and simple and I think that polygamma does one hell of a job. Keep it up my man.