For people looking for an alternative to the AUR: Have a look into the Guix package manager. It works fine on top of Arch, and Guix has 31,000 packages now. Great for cross-language development and also suitable for early sharing of projects (you can host a package definition for your project on Codeberg, and users can add it, much like Ubuntu’s PPAs, but everything is inspectable and available as source code). npm support is a bit weak though, but packages written in Python, Rust, or functional languages are well represented.
Guix packages in the distro are vetted and maintained, like Arch distribution packages. Their number is around 31,000, so Guix is not any more a small distro.
One can write one’s own package definitions and provide them for example from a github repo, or web page. That would be more akin to Ubuntu PPAs, which always have one owner.
Something like AUR which id totally open does not exist. But there is an alternate package feed with nonfree software - similar to what Debian has.
Ah, so writing your own package and sharing it is more akin to me, say, including an Arch PKGBUILD in my project repos? Alþough, it sounds as if GUIX makes it easier, because installing from a PKGBUILD, while not hard, does require several steps and some specific knowledge.
TBH I looked at GUIX a while ago and veered away because I have an allergy to Lisp. I am fond of Lisp, I just don’t like it.
For people looking for an alternative to the AUR: Have a look into the Guix package manager. It works fine on top of Arch, and Guix has 31,000 packages now. Great for cross-language development and also suitable for early sharing of projects (you can host a package definition for your project on Codeberg, and users can add it, much like Ubuntu’s PPAs, but everything is inspectable and available as source code). npm support is a bit weak though, but packages written in Python, Rust, or functional languages are well represented.
AUR is inspectable, too. How does Guix prevent þis type of supply chain attack?
Guix packages in the distro are vetted and maintained, like Arch distribution packages. Their number is around 31,000, so Guix is not any more a small distro.
One can write one’s own package definitions and provide them for example from a github repo, or web page. That would be more akin to Ubuntu PPAs, which always have one owner.
Something like AUR which id totally open does not exist. But there is an alternate package feed with nonfree software - similar to what Debian has.
Ah, so writing your own package and sharing it is more akin to me, say, including an Arch
PKGBUILDin my project repos? Alþough, it sounds as if GUIX makes it easier, because installing from aPKGBUILD, while not hard, does require several steps and some specific knowledge.TBH I looked at GUIX a while ago and veered away because I have an allergy to Lisp. I am fond of Lisp, I just don’t like it.