[aur-requests] [PRQ#12376] Deletion Request for strawberry-bin
Snuggle [1] filed a deletion request for strawberry-bin [2]: This package is in complete shambles. I hate being grumpy and I'm usually an upbeat person, but damn, this grinds my gears. 1 - He is using a Ubuntu-Bionic .deb build which has massively incompatible libraries, instead of using upstream's .RPM or .tar.xz releases available below. (https://github.com/jonaski/strawberry/releases) (http://builds.strawbs.net/ubuntu/bionic/) 2 - It's taken from upstream's Ubuntu builds and uploaded to his own GitHub as a source. (https://github.com/liberodark/Strawberry-Bin) 3 - He's then complained on upstream's GitHub about the library version mismatch and confused the heck out of everyone. (https://github.com/jonaski/strawberry/issues/12) 4 - It's a potential security risk as his own GitHub could contain *anything* and people will not know unless they notice the borked source in the PKGBUILD or extract the .deb themselves. 5 - The package is entirely broken, doesn't work and complains about needing libprotobuf.so.10, when Arch is currently on libprotobuf.so.16. (Due to the Ubuntu build for no reason) 6 - There already exists `strawberry`, `strawberry-git` and `strawberry-full-git`. This package doesn't add any value and is irreparably broken. You might be able to orphan this instead and get a new maintainer. I don't think this maintainer is able to package correctly, they don't seem to speak English very well and I have no clue why they thought any of this was a good idea, but this is a potential security risk and it's totally broken anyway. Apologies for the rant and thank you for doing an awesome job. ❤️ [1] https://aur.archlinux.org/account/Snuggle/ [2] https://aur.archlinux.org/pkgbase/strawberry-bin/
Request #12376 has been accepted by Alad [1]. [1] https://aur.archlinux.org/account/Alad/
participants (1)
-
notify@aur.archlinux.org