{"id":22526622,"url":"https://github.com/bluskript/manjarno","last_synced_at":"2025-08-07T17:55:50.460Z","repository":{"id":103724145,"uuid":"302941498","full_name":"bluskript/manjarno","owner":"bluskript","description":"so you're using manjaro huh?","archived":false,"fork":false,"pushed_at":"2020-10-10T16:34:35.000Z","size":17,"stargazers_count":2,"open_issues_count":0,"forks_count":6,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-03-28T04:19:03.764Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bluskript.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-10-10T16:17:34.000Z","updated_at":"2025-01-06T13:02:13.000Z","dependencies_parsed_at":"2023-10-21T06:45:15.540Z","dependency_job_id":null,"html_url":"https://github.com/bluskript/manjarno","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluskript%2Fmanjarno","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluskript%2Fmanjarno/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluskript%2Fmanjarno/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluskript%2Fmanjarno/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bluskript","download_url":"https://codeload.github.com/bluskript/manjarno/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248904908,"owners_count":21180880,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-12-07T06:17:30.036Z","updated_at":"2025-04-14T15:23:54.526Z","avatar_url":"https://github.com/bluskript.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Manjaro is not ARCH!\nA lot of Manjaro users I have talked to say that Manjaro is just Arch\nwith an installer. However, this is fundamentally wrong!\n\nManjaro maintains a separate repository which is not in sync with Arch's\nmain repositories which means Manjaro is not *just* Arch. To add to that,\neven Manjaro wiki states that it is not Arch [1]! To quote the wiki,\n\n\u003e In fact, the differences between Manjaro and Arch are far greater than\n\u003e the differences between the popular Ubuntu distribution and its many\n\u003e derivatives, including Mint and Zorin.\n\n# Own repository\nManjaro claims to be stable just by delaying packages for a week. This\nis not an approach a stable distribution would take at all!\n\n## The problems introduced\nIf Manjaro had to be actually stable, it needs to hold back the AUR packages\nas well. It has to maintain its AUR that is in sync with the Manjaro repos.\n\nSay that a package in the AUR depends on a library, say libxyz. And libxyz is\nin the main repos, not in the AUR. The package is updated so that it relies\non the new features introduced in libxyz's version 1.1 however Manjaro delays\npackages so libxyz is still on 1.0 in Manjaro. If you update the package in\nManjaro, it will break because Manjaro holds back packages. So the only\nway Manjaro can be stable is by literally forking all the Arch related\nrepositories including the AUR and keeping them in sync.\n\n# Security\nManjaro is not really a secure distro.\n\nTheir own updater had a security vulnerability which wasn't fixed\nuntil recently [2]. This is actually a core package, not an extra or\ncommunity package. To quote the list,\n\n\u003e I have discovered an issue with one of your core Manjaro packages,\n\u003e `manjaro-system` 20180716-1 and earlier.\n\u003e The issue allows a local attacker to execute a Denial of Service,\n\u003e Arbitrary Code Execution, and Privilege Escalation attack.\n\nThe amount of attacks that can be done due to the vulnerability is a\nlot!\n\nThe Manjaro updater [3] does all the bad practices that one could do in\na general Linux system and Arch Linux system specifically. Each time\nthe system updates, they reinstall some packages to \"fix\" issues and\nthey use the `--no-confirm` flag (force) everytime they do so and\nvarious other odd sequence of commands which are just as bad, if not\nmore.\n\nIn an update, password less updates in pamac (Manjaro's AUR helper)\nwere sneaked in and from the look in the issue [4] made concerning this,\nthe change was made to look like a \"feature\". This is a major security\nissue considering that packages in AUR are not checked by Arch Linux\nmaintainers (and Manjaro does not maintain its own either). Some AUR\npackages were found to be malware in the past. So think about a casual\nuser (Manjaro's target demographic are not really power users) installing\na harmless-looking AUR package that could potentially mess their system!\n\n# SSL Certificates\nManjaro let their SSL certificates expire not once but twice [5]!\nThe first time, they asked the users to use a private window and/or change\nthe system time [6].\nThe second time when the SSL certificates expired, they did the same [7].\n\n# Links\n[1] https://wiki.manjaro.org/index.php?title=Manjaro:_A_Different_Kind_of_Beast\n\n[2] https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html\n\n[3] https://gitlab.manjaro.org/packages/core/manjaro-system/blob/master/manjaro-update-system.sh#L34\n\n[4] https://gitlab.manjaro.org/applications/pamac/issues/719\n\n[5] https://www.reddit.com/r/linux/comments/4inrut/manjaros_ssl_certificate_expired_again/\n\n[6] https://web.archive.org/web/20150409112614/https://manjaro.github.io/\n\n[7] https://web.archive.org/web/20160512210401/https://manjaro.github.io/\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbluskript%2Fmanjarno","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbluskript%2Fmanjarno","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbluskript%2Fmanjarno/lists"}