Search results for "Deletion request for pkgbase" - Aur-requests

[aur-requests] [PRQ#35220] Deletion Request for ffmpeg-compat-58

by notify＠aur.archlinux.org

MarsSeed [1] filed a deletion request for ffmpeg-compat-58 [2]: I believe this package should be deleted at least until Arch extra carries ffmpeg4.4. It is not useful to keep this imperfect duplicate of that in AUR. Also, the ffmpeg-compat-* naming scheme have been sunsetted by Arch a long time ago, opting instead to occasionally carry a parallel but full legacy ffmpeg version, cf. ffmpeg4.4 in extra, or AUR/ffmpeg3.4. The huge problem with ffmpeg-compat-* packages is that they do a full build, but then strip almost everything out, keeping only some versioned .SO files. Then it leads to the problem that no AUR packages can build from source against such an ffmpeg-compat package, because it does not provide the header includes for that ffmpeg version. In contrast, ffmpeg4.4 and e.g. AUR/ffmpeg3.4 carry everything including the headers, and cleverly solve the problem of side-by-side installation. ffmpeg-compat-58 is not needed specifically by anything on AUR. Those AUR packages that define depending on ffmpeg's SO libraries link to it indirectly via this package's virtual provides, but these dependent AUR packages would, as mentioned above, fail to build if the user did have this ffmpeg-compat package installed instead of ffmpeg4.4. All in all, not needed by anything, and ffmpeg-compat packages can prevent AUR's source-built packages from compiling. [1] https://aur.archlinux.org/account/MarsSeed/ [2] https://aur.archlinux.org/pkgbase/ffmpeg-compat-58/

3 years, 6 months

Re: [PRQ#46158] Deletion Request for python-sidekit

by Marcell Meszaros

Upstream is in a bad state; last release on PyPI is from 2021. There are a few newer commits from last year in project's repository, but that repo seems to host a lower, much earlier pkgver baseline - I don't know where the PyPI sources have come from then. But as GPU accelerated AI/DL/ML is a fast-moving field, this old Python module now depends on outdated or even discontinued libraries. If someone still wants to give this a try, they should install either the PyPI or the GitLab version with pipx or venv. It does not seem worth keeping on AUR, especially because it was last updated there in 2017, and only I and former pkgowner commented, about python-theano dependency being EOL and deprecated. Deleting this would help the removal in the near future of the Aesara project's temporary, and also EOL drop-in replacement for theano, called python-theano-pymc. On 12 August 2023 23:21:37 GMT+02:00, notify(a)aur.archlinux.org wrote: >MarsSeed [1] filed a deletion request for python-sidekit [2]: > >Orphan OOD scientific package from 2017. >Not useful to keep here as is. >Latest version can be installed from PyPI or the GitLab repo hosted by >the sponsoring academic institution. > >[1] https://aur.archlinux.org/account/MarsSeed/ >[2] https://aur.archlinux.org/pkgbase/python-sidekit/

2 years, 1 month

Re: [PRQ#46359] Deletion Request for keepassxc-allow-aur-extension-origin-bin

by Marcell Meszaros

AUR content is not supported by repo maintainers. So it is unlikely that they will accommodate a feature request to make repo's keepassxc accept the binding from an AUR KeePassXC Chrome extension. The rationale of this package, however, is to allow users to skip our Big Brother Google and have a viable alternative to installing said extension from the Chrome web store. Until repo takes up carrying that browser extension, this package should be allowed to remain on AUR. On 16 August 2023 21:16:36 GMT+02:00, notify(a)aur.archlinux.org wrote: >yochananmarqos [1] filed a deletion request for keepassxc-allow-aur- >extension-origin-bin [2]: > >Please do not submit duplicate packages just for a small patch. File a >bug report instead. > >"When submitting a package to the AUR, observe the following rules: > >The submitted PKGBUILDs must not build applications already in any of >the official binary repositories under any circumstances. Check the >official package database for the package. If any version of it >exists, do not submit the package. If the official package is out-of- >date, flag it as such. If the official package is broken or is lacking >a feature, then please file a bug report." > >-- >https://wiki.archlinux.org/title/AUR_submission_guidelines#Rules_of_submiss… > >[1] https://aur.archlinux.org/account/yochananmarqos/ >[2] https://aur.archlinux.org/pkgbase/keepassxc-allow-aur-extension-origin-bin/

2 years, 4 months

[PRQ#52578] Deletion Request for netlify-application

by notify＠aur.archlinux.org

xiota [1] filed a deletion request for netlify-application [2]: This package should be deleted because it compromises the security of the systems on which it is installed. This package uses Electron as a web browser to navigate a streaming media website. Electron is *not* a web browser. Although it uses the same rendering engine as Chromium, it is not Chromium, and it does not have the same security features Chromium does. On the contrary, Electron intentionally has reduced security because it is intended for desktop apps, not web browsing. At [Security](https://www.electronjs.org/docs/latest/tutorial/security), Electron developers state: > A security issue exists whenever you receive code from an untrusted source (e.g. a remote server) and execute it locally. As an example, consider a remote website being displayed inside a default BrowserWindow. If an attacker somehow manages to change said content (either by attacking the source directly, or by sitting between your app and the actual destination), they will be able to execute native code on the user's machine. This apps does what Electron devs describe avoiding: ``` const mainWindow = new BrowserWindow(...) ... mainWindow.loadURL('https://...') ``` Further, this package is named in a way that some users may think it is an official package, which it is not. [1] https://aur.archlinux.org/account/xiota/ [2] https://aur.archlinux.org/pkgbase/netlify-application/

1 year, 11 months

[PRQ#52583] Deletion Request for stan-desktop

by notify＠aur.archlinux.org

xiota [1] filed a deletion request for stan-desktop [2]: This package should be deleted because it compromises the security of the systems on which it is installed. This package uses Electron as a web browser to navigate a streaming media website. Electron is *not* a web browser. Although it uses the same rendering engine as Chromium, it is not Chromium, and it does not have the same security features Chromium does. On the contrary, Electron intentionally has reduced security because it is intended for desktop apps, not web browsing. At [Security](https://www.electronjs.org/docs/latest/tutorial/security), Electron developers state: > A security issue exists whenever you receive code from an untrusted source (e.g. a remote server) and execute it locally. As an example, consider a remote website being displayed inside a default BrowserWindow. If an attacker somehow manages to change said content (either by attacking the source directly, or by sitting between your app and the actual destination), they will be able to execute native code on the user's machine. This apps does what Electron devs describe avoiding: ``` const mainWindow = new BrowserWindow(...) ... mainWindow.loadURL('https://...') ``` Further, this package is named in a way that some users may think it is an official package, which it is not. [1] https://aur.archlinux.org/account/xiota/ [2] https://aur.archlinux.org/pkgbase/stan-desktop/

1 year, 11 months

Re: Fwd: Re: [PRQ#49071] Deletion Request for jdk13-openjdk-bin

by Marcell Meszaros

universal-gcode-sender has a new release, which no longer needs this old Java JDK. Please update the former to the newest version (I've flagged it with the revenant information.) On 11 November 2023 00:35:39 GMT+01:00, "Jochum Döring" <jochum(a)home.nl> wrote: > > > >-------- Forwarded Message -------- >Subject: Re: [PRQ#49071] Deletion Request for jdk13-openjdk-bin >Date: Mon, 16 Oct 2023 17:52:14 +0200 >From: Marcell Meszaros <marcell.meszaros(a)runbox.eu> >To: Jochum Döring <jochum(a)home.nl>, aur-requests(a)lists.archlinux.org > > > >Hi, > >Thank you for your reply, and sorry that I didn't consider this. I will revoke my deletion request shortly. > >Cheers, >Marcell (MarsSeed) > >On 16 October 2023 17:09:16 GMT+02:00, "Jochum Döring" <jochum(a)home.nl> wrote: >> Have you looked into this? It's a dependency for a CNC software package. It won't work without this specific version. >> The depending package is actively being worked on and has since migrated to jdk17, but building with jdk17 currently fails and succeeds with openjdk13. I'm working with the devs to find a solution. >> So for now it is still required until the problem is resolved. >> >> On 16-10-23 14:39, notify(a)aur.archlinux.org wrote: >>> MarsSeed [1] filed a deletion request for jdk13-openjdk-bin [2]: >>> >>> Cleanup of deprecated JDK 13 short-term support packages. >>> >>> JDK 13 is EOL since March 2020; >>> not even security patches get delivered after that date. >>> >>> Users should migrate to a newer JDK/JRE. >>> >>> [1] https://aur.archlinux.org/account/MarsSeed/ >>> [2] https://aur.archlinux.org/pkgbase/jdk13-openjdk-bin/ >> > > >

2 years, 1 month

[PRQ#59798] Deletion Request for graphite-web

by notify＠aur.archlinux.org

MarsSeed [1] filed a deletion request for graphite-web [2]: It is not viable to keep this broken package. Upstream hasn't released a new version since 2022 [a], and since then they stopped developing it and only accepted no-impact third party PR's to the master branch, mostly cosmetic / typo-fix / documentation fix / minimal config adjustment etc. [b] The problem is that this is not compatible with current Arch/extra/python-django v4, let alone the upcoming v5 (v5.0.4 is in PyPI, and Arch/extra/python-django is already flagged). I've considered the viability of a git package, but this one is already a VCS build in disguise, and it doesn't help make this work. Similarly, the (wrongly named) python3-django-tagging is not compatible with current python-django v4 (first released in 2021). That package has been abandoned by its upstream for 4 years. [c] No one seems to be using this package off of AUR: 0 votes, 0.000000 popularity. @eggz is not a competent maintainer, he just dismissed my earlier packaging feedback as irrelevant "chatter". There is no testing in PKGBUILD check() so this package passes as if it was functional. [a]: https://github.com/graphite-project/graphite-web [b]: https://github.com/graphite-project/graphite-web/commits/master/ [c]: https://github.com/Fantomas42/django-tagging [1] https://aur.archlinux.org/account/MarsSeed/ [2] https://aur.archlinux.org/pkgbase/graphite-web/

1 year, 7 months

Re: [PRQ#59564] Deletion Request for aiopmplus

by Marcell Meszaros

On 25 April 2024 18:26:40 GMT+02:00, notify(a)aur.archlinux.org wrote: >MarsSeed [1] filed a deletion request for aiopmplus [2]: > >Useless, broken, badly packaged. Upstream code is dead on arrival. > >Depends on AUR/eaur from same owner, who submitted his own package for >deletion (PRQ#59562). [a] > >That latter application fails to run and crashes with the following >output: > >terminate called after throwing an instance of >'std::filesystem::__cxx11::filesystem_error' > what(): filesystem error: cannot set current path: No such file or >directory >Aborted (core dumped) > >Otherwise aiopmplus fails to do anything. Running 'pm' crashes with >core dump. >And when used with the expected arguments (e.g. 'pm snap install >spotify'), >it just fails to find the needed executable. > >Personal sandbox dummy packages don't belong on the AUR. > >[a]: >https://lists.archlinux.org/archives/list/aur- >requests(a)lists.archlinux.org/thread/QE3E452NMMA36HJK24ZU2VJB73KMFMRG/ > >[1] https://aur.archlinux.org/account/MarsSeed/ >[2] https://aur.archlinux.org/pkgbase/aiopmplus/ Submitter has disowned this useless package. I've discovered a security guidelines violation in the runtime code: instead relying on properly defined depends, if the user sets the CLI argument of package type to "flex", the main runtime code tries to download submitter's other hackish package called FlexPkg and copy it inside the system with sudo, and make it executable with sudo chmod. No one should use this dangerous and also superfluous shim CLI application.

1 year, 7 months

Re: [PRQ#45600] Deletion Request for gamejolt-client

by Mark Wagie

@MarsSeed: I didn't know the history, thanks for filling me in. However, this is not a closed source application. Did you see FabioLolix's comment? The source is here: https://github.com/gamejolt/gamejolt I submitted the deletion request now knowing that it could take weeks to even be seen. Hence why I added it to the queue now rather than later. As I said, I'll close the request if the issues are addressed. Sent with Proton Mail secure email. ------- Original Message ------- On Saturday, July 29th, 2023 at 12:45 PM, Marcell Meszaros <marcell.meszaros(a)runbox.eu> wrote: > @yochananmarqos, please don't turn to such draconian measures. It's not the maintainer's fault that the GameJolt provider arbitrarily changes their shitty download URL. > > And this new package was created because I suggested/requested that the earlier package, gamejolt-client-bin-aur be renamed, because that name is both nonconformant to AUR naming rules, and also the '-aur' suffix is irrelevant. > > This is a closed-source application, so maintainer renamed and resubmitted their earlier package as 'gamejolt-client', and initiated an AUR merge (see PRQ#45586.) > > Let the maintainer update the source URL, don't go for the nuclear option within the first minute. > > Thank you for your cooperation and understanding. > > Marcell (MarsSeed) > > On 29 July 2023 20:20:50 GMT+02:00, notify(a)aur.archlinux.org wrote: > > > yochananmarqos [1] filed a deletion request for gamejolt-client [2]: > > > > Please don't add non-functional packages to the AUR. > > See the comments and address the issues before this deletion request > > comes up in the queue. If the issues are addressed in the meantime, > > I'll close this request. > > > > [1] https://aur.archlinux.org/account/yochananmarqos/ > > [2] https://aur.archlinux.org/pkgbase/gamejolt-client/

2 years, 4 months

[PRQ#42756] Orphan Request for poppler-lcd

by notify＠aur.archlinux.org

MarsSeed [1] filed an orphan request for poppler-lcd [2]: Needs maintenance or deletion. OOD for 1+ year. [1] https://aur.archlinux.org/account/MarsSeed/ [2] https://aur.archlinux.org/pkgbase/poppler-lcd/

2 years, 5 months

Aur-requests search results for query "Deletion request for pkgbase"