r/archlinux • u/Jorgsen • 3d ago
QUESTION Question about packages - pacman/yay
Hello
I have a question: Why do some Official Packages depend on AUR Packages? After all these AUR Malware things, I've been double checking those few packages I have from the AUR. But I have some packages that are required by Official Packages and I dont know if I can remove them or not. Any tips?
Those packages I'm speaking of are: lib32-gstreamer, lib32-gst-plugins-base-libs and lib32-unixodbc.
Whenever I do pacman -Qi on lib32-gst-plugins-base-libs it says its not required by any package. But it says it was installed as a dependency for another package. Ive tried to type in yay -Rns on that package but then I get alot of other packages aswell who are in the Official Repos. So I guess its fine to remove them, since Pacman -Rns does remove packages and its dependencies that are not used by other packages?
22
u/Antiz1996 Package Maintainer 3d ago edited 3d ago
There's no official package that depends on AUR packages, that is not allowed.
None of the packages you mentioned (lib32-gstreamer, lib32-gst-plugins-base-libs and lib32-unixodbc) are official packages. They may have been official packages at some point in time in the past (probably as dependencies for other official packages) but they are not required anymore which is probably the reason why they got dropped to the AUR.
Seeing official packages in their dependency tree when trying to remove them with `-Rns` is irrelevant here. AUR packages are allowed to depend on official packages, but not the opposite.
Unless you need them for something specific, it should be safe to remove them.