It's not the AUR. It's the rolling release cycle, and probably even more importantly, lack of support options.
replyThe AUR has absolutely nothing to do with the rolling release cycle
replyyes & comment didn't mention that both are dependent, fooqux is correct.
replyHe literally said "It's the rolling release cycle" he is not correct
replyYou're reading it wrong. He's giving an alternative reason why it's not used in enterprise.
replyAgree
replyArch is not used in enterprise solutions because of the AUR? Can't you just not use it?
replyAUR is choice, rolling release is the reason
replyNo, it's not. If Debian had a community-maintained repo of additional packages, the same thing could happen there.
replyThe fundamental problem is having something that has very loose oversight and next to no controls. That may have worked in the past, but in the day and age of constant supply chain attacks, it's a major liability.
GP was talking about why Arch isn't used in enterprise, not what happened in the post.
replyRolling release has nothing to do with this. It could just as well be a PPA in ubuntu or any deb repo for debian or similar.
replyMakes sense.
reply