[aur-requests] [PRQ#12376] Deletion Request for strawberry-bin
notify at aur.archlinux.org
notify at aur.archlinux.org
Sat Aug 18 09:48:46 UTC 2018
Snuggle [1] filed a deletion request for strawberry-bin [2]:
This package is in complete shambles.
I hate being grumpy and I'm usually an upbeat person, but damn, this
grinds my gears.
1 - He is using a Ubuntu-Bionic .deb build which has massively
incompatible libraries, instead of using upstream's .RPM or .tar.xz
releases available below.
(https://github.com/jonaski/strawberry/releases)
(http://builds.strawbs.net/ubuntu/bionic/)
2 - It's taken from upstream's Ubuntu builds and uploaded to his own
GitHub as a source.
(https://github.com/liberodark/Strawberry-Bin)
3 - He's then complained on upstream's GitHub about the library
version mismatch and confused the heck out of everyone.
(https://github.com/jonaski/strawberry/issues/12)
4 - It's a potential security risk as his own GitHub could contain
*anything* and people will not know unless they notice the borked
source in the PKGBUILD or extract the .deb themselves.
5 - The package is entirely broken, doesn't work and complains about
needing libprotobuf.so.10, when Arch is currently on
libprotobuf.so.16. (Due to the Ubuntu build for no reason)
6 - There already exists `strawberry`, `strawberry-git` and
`strawberry-full-git`. This package doesn't add any value and is
irreparably broken. You might be able to orphan this instead and get a
new maintainer.
I don't think this maintainer is able to package correctly, they don't
seem to speak English very well and I have no clue why they thought
any of this was a good idea, but this is a potential security risk and
it's totally broken anyway.
Apologies for the rant and thank you for doing an awesome job. ❤️
[1] https://aur.archlinux.org/account/Snuggle/
[2] https://aur.archlinux.org/pkgbase/strawberry-bin/
More information about the aur-requests
mailing list