Arch Linux

Problem:

There are several threads about permission errors when uploading packages. Upon investigation, it is often revealed that a pkgbase has been claimed by a user without uploading any content. The webinterface doesn't show anything, it is only possible to detect that and view the owner by manually opening the page for the package base in a browser:
> https://aur.archlinux.org/pkgbase/${pkgname}/

Here are some examples:
* https://bbs.archlinux.org/viewtopic.php?id=202365
* https://bbs.archlinux.org/viewtopic.php?id=201989
* https://bbs.archlinux.org/viewtopic.php?id=201613 (pkgbase has been removed since)


Proposal:

If it is intentional to allow such reservations, then implement at least one the following things:

* Make these claimed, but empty pkgbase entries easily accessible from the AUR interface.
* Let these empty entries expire after 24 hours into orphan status or outright delete them.

A quick and dirty solution would be to check the time in the git authentication hook without any visual indicators. If there is an empty pkgbase that is older than 24 hours, orphan it and allow full access to the current user. If it is more recent, mention in the error message that another user has claimed the package and you should wait 24 hours before trying again.