[PRQ#65773] Deletion Request for automedia-git
MarsSeed [1] filed a deletion request for automedia-git [2]: Violates the Arch VCS package guidelines since at least 2022 when I pointed out that this should not use a tarball as source. The issue has not been addressed since, despite @patlefort's request for the same from this year. Maintainer blatantly follows this practice with all their AUR '-git' packages, despite multiple requests from different users to make the necessary packaging corrections. There are other issues here, like: - compiling source code inside package(), - and forcing a static build with musl instead of making a regular gcc/glibc compilation, and static-bundling a heavily vulnerable old version of cjson (copy-pasted cJSON.{c,h} from 2020 to the source distribution) instead of using the most secure, API-compatible release [a], available as a shared lib in Arch/extra/cjson. There is no actual evidence that anyone is using this off of AUR. Votes: 0 Popularity: 0.000000 Last comments apart from the packaging rule violation related ones (mine from 2022 and @patlefort's from 2024) are from 2020. [a]: https://github.com/DaveGamble/cJSON/compare/v1.7.14...v1.7.18 [1] https://aur.archlinux.org/account/MarsSeed/ [2] https://aur.archlinux.org/pkgbase/automedia-git/
participants (1)
-
notify@aur.archlinux.org