[aur-general] package removal/orphaning request: rubberband

hollunder at gmx.at hollunder at gmx.at
Thu Mar 26 08:36:39 EDT 2009


On Wed, 25 Mar 2009 11:20:36 +0100
<hollunder at gmx.at> wrote:

> Please orphan or remove this package, I'd be willing to take over but
> the author of the PKGBUILD can have it back if he wants to.
> 
> http://aur.archlinux.org/packages.php?ID=15349
> 
> For the following reasons:
> 
> -Wrong homepage link
> -some minor things inside the PKGBUILD
> -out of date since a few weeks
> 
> and most importantly:
> 
> -source isn't downloaded from the authors website and the downloaded
> tarball is significantly larger than the original one:
> 
> rubberband-1.2.tar.bz		298627
> rubberband-1.2-arch.tar.bz2	2739510
> 
> I won't attempt to see what the difference is, either way it's just
> wrong to download a modified tarball from a third party website,
> especially with an active project.
> 
> Best regards
> Philipp


So there's a package with indications for malicious code and no-one
even cares to comment?


More information about the aur-general mailing list