
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
Arch User Repository package data from the public AUR RPC. No key required.
This file is self contained. It reads public data only and never writes to the machine. All output is bounded and honest about what could not be fetched.
search Search packages.info Details for one package.npm install
npm run build
node dist/index.js
Data comes from the public AUR RPC endpoint.
FAQs
Arch User Repository package search from the AUR RPC. No key required.
The npm package aur-mcp receives a total of 92 weekly downloads. As such, aur-mcp popularity was classified as not popular.
We found that aur-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.