Yes, but Arch, though it had the compromised package, it appears the package didn’t actually compromise Arch because of how both Arch and the attack were set up.

Unlike arch that has no “stable”. Yap, sure; idk what it was supposed to mean, tho.