KDE Linux drops AUR from its construct pipeline over safety and reliability issues

All the way through my stint with Arch Linux, I realized that the Arch Consumer Repository (AUR) was once a lifesaver when it got here to discovering and downloading apps. Sadly, as helpful as it can be, it isn’t best possible. It has its fair proportion of issues, akin to malware within the programs and coffee outages, and it is one thing that has brought about KDE Linux’s builders to chop out AUR from its construct pipeline.

KDE Linux stops the use of AUR within the construct pipeline because of safety issues

You, as a person, can proceed the use of it, even though

KDE Plasma developer, Nate Graham, printed a weblog publish on his web site Pointiest Stick. The publish describes the whole thing that came about in KDE Linux in Would possibly 2026. Whilst folks know KDE absolute best for its desktop atmosphere, Plasma, additionally it is running on KDE Linux, a complete working machine that leverages KDE’s massive vary of instrument.

One observe that caught out to me in my view was once the removing of fenrir, which wasn’t doing so much in KDE Linux. With fenrir long gone, the KDE group may in the end forestall the use of AUR as a part of their construct pipeline. Graham does not talk about why fenrir was once a keystone holding AUR in position, however it kind of feels that it needed to pass earlier than AUR did.

So, why did KDE Linux wish to eliminate AUR, anyway? Neatly, Nate Graham himself has the solution to that. Again in August 2026, Graham posted a role to KDE Linux’s mission web page, merely titled “Prevent the use of AUR.” In it, he made his case for KDE to transport off the use of AUR as a part of the construct pipeline, bringing up a number of causes:

• Safety: AUR has a considerably decrease stage of safety than the programs in Arch’s primary repos. Malware has been found out in AUR programs a couple of instances not too long ago.
• Reliability: AUR has occasional downtime and this blocks the programs pipeline, this means that individuals who rely on git grasp staying present finally end up with stale content material. The closing outage lasted a couple of days, from 2025-08-12 thru 2025-08-15.

Graham additionally notes that the use of AUR is going in opposition to the “no packaging wisdom required to expand it” coverage, and that KDE Linux needs to be as platform-agnostic as imaginable so you’ll be able to switch out the core with out inflicting any issues. Now, with all of the prep completed, KDE Linux can eliminate AUR from the construct procedure.

It is value noting that this handiest impacts people who find themselves growing KDE Linux. As a KDE Linux person, you’ll be able to nonetheless use AUR to obtain your programs; it isn’t going away. It is simply that the builders felt that the use of AUR all through the delicate OS construction procedure was once too large a possibility.