Alad Wenter

There could also be an environment variable to disable the (recursive) `aur-sync--filter` for debug purposes, where a naive replacement of removed packages is done.

AUR_EXEC_PATH needs to be set accordingly, preferably by expanding `lib/` (`lib/aurweb`, `lib/pacman`, `lib/util`, `lib/`). The tests could also be run in parallel.

> NOPASSWD is tricky because a single command can inadvertently expose root shells such as zip -TT and without command-line validation (which is often not possible despite sudo offering such...

The github mirror also includes packages which were deleted from AUR, including packages with ill-intended contents. Searching or fetching from the github mirror is feasible, but doing so then removes...

> Couldn't you just force the user to read the PKGBUILD then and also display a red capslock banner warning them of the potential consequences I would say to the...

You could just cache the JSON data. It's not like the AUR RPC is down permanently. https://aur.archlinux.org/packages-meta-ext-v1.json.gz

Code to efficiently retrieve packages from the github mirror is available here: https://github.com/aurutils/aurutils/blob/master/lib/aurweb/aur-fetch--mirror I think the best approach would be a tool that sets up a local RPC, that builds...

You don't need to fetch metadata for all packages. You just fetch the branches for whatever packages are needed for the query. These will be automatically cached on later queries.

Around the time the github AUR mirror was created, a separate metadata archive was added. As it turned out the changes were too frequent for the git repository. A simple...