[aur-requests] [PRQ#12376] Deletion Request for strawberry-bin

notify at aur.archlinux.org notify at aur.archlinux.org
Sat Aug 18 09:48:46 UTC 2018


Snuggle [1] filed a deletion request for strawberry-bin [2]:

This package is in complete shambles.
I hate being grumpy and I'm usually an upbeat person, but damn, this
grinds my gears.

1 - He is using a Ubuntu-Bionic .deb build which has massively
incompatible libraries, instead of using upstream's .RPM or .tar.xz
releases available below.
(https://github.com/jonaski/strawberry/releases)
(http://builds.strawbs.net/ubuntu/bionic/)

2 - It's taken from upstream's Ubuntu builds and uploaded to his own
GitHub as a source.
(https://github.com/liberodark/Strawberry-Bin)

3 - He's then complained on upstream's GitHub about the library
version mismatch and confused the heck out of everyone.
(https://github.com/jonaski/strawberry/issues/12)

4 - It's a potential security risk as his own GitHub could contain
*anything* and people will not know unless they notice the borked
source in the PKGBUILD or extract the .deb themselves.

5 - The package is entirely broken, doesn't work and complains about
needing libprotobuf.so.10, when Arch is currently on
libprotobuf.so.16. (Due to the Ubuntu build for no reason)

6 - There already exists `strawberry`, `strawberry-git` and
`strawberry-full-git`. This package doesn't add any value and is
irreparably broken. You might be able to orphan this instead and get a
new maintainer.

I don't think this maintainer is able to package correctly, they don't
seem to speak English very well and I have no clue why they thought
any of this was a good idea, but this is a potential security risk and
it's totally broken anyway.

Apologies for the rant and thank you for doing an awesome job. ❤️

[1] https://aur.archlinux.org/account/Snuggle/
[2] https://aur.archlinux.org/pkgbase/strawberry-bin/


More information about the aur-requests mailing list