Please orphan or remove this package, I'd be willing to take over but the author of the PKGBUILD can have it back if he wants to.
http://aur.archlinux.org/packages.php?ID=15349
For the following reasons:
-Wrong homepage link -some minor things inside the PKGBUILD -out of date since a few weeks
and most importantly:
-source isn't downloaded from the authors website and the downloaded tarball is significantly larger than the original one:
rubberband-1.2.tar.bz 298627 rubberband-1.2-arch.tar.bz2 2739510
I won't attempt to see what the difference is, either way it's just wrong to download a modified tarball from a third party website, especially with an active project.
Best regards Philipp
On Wed, 25 Mar 2009 11:20:36 +0100 hollunder@gmx.at wrote:
Please orphan or remove this package, I'd be willing to take over but the author of the PKGBUILD can have it back if he wants to.
http://aur.archlinux.org/packages.php?ID=15349
For the following reasons:
-Wrong homepage link -some minor things inside the PKGBUILD -out of date since a few weeks
and most importantly:
-source isn't downloaded from the authors website and the downloaded tarball is significantly larger than the original one:
rubberband-1.2.tar.bz 298627 rubberband-1.2-arch.tar.bz2 2739510
I won't attempt to see what the difference is, either way it's just wrong to download a modified tarball from a third party website, especially with an active project.
Best regards Philipp
So there's a package with indications for malicious code and no-one even cares to comment?
hollunder@gmx.at wrote:
On Wed, 25 Mar 2009 11:20:36 +0100 hollunder@gmx.at wrote:
Please orphan or remove this package, I'd be willing to take over but the author of the PKGBUILD can have it back if he wants to.
http://aur.archlinux.org/packages.php?ID=15349
For the following reasons:
-Wrong homepage link -some minor things inside the PKGBUILD -out of date since a few weeks
and most importantly:
-source isn't downloaded from the authors website and the downloaded tarball is significantly larger than the original one:
rubberband-1.2.tar.bz 298627 rubberband-1.2-arch.tar.bz2 2739510
I won't attempt to see what the difference is, either way it's just wrong to download a modified tarball from a third party website, especially with an active project.
Best regards Philipp
So there's a package with indications for malicious code and no-one even cares to comment?
Orphaned - even if just temporarily...
Allan
On Thu, 26 Mar 2009 22:41:08 +1000 Allan McRae allan@archlinux.org wrote:
hollunder@gmx.at wrote:
On Wed, 25 Mar 2009 11:20:36 +0100 hollunder@gmx.at wrote:
Please orphan or remove this package, I'd be willing to take over but the author of the PKGBUILD can have it back if he wants to.
http://aur.archlinux.org/packages.php?ID=15349
For the following reasons:
-Wrong homepage link -some minor things inside the PKGBUILD -out of date since a few weeks
and most importantly:
-source isn't downloaded from the authors website and the downloaded tarball is significantly larger than the original one:
rubberband-1.2.tar.bz 298627 rubberband-1.2-arch.tar.bz2 2739510
I won't attempt to see what the difference is, either way it's just wrong to download a modified tarball from a third party website, especially with an active project.
Best regards Philipp
So there's a package with indications for malicious code and no-one even cares to comment?
Orphaned - even if just temporarily...
Allan
Thanks Allan. I updated, fixed and orphaned it again so the author can adopt it again if he wants to. If it's still orphaned when the next version is out I'll adopt it.
Philipp
aur-general@lists.archlinux.org