MarsSeed [1] filed a deletion request for automedia-git [2]:
Violates the Arch VCS package guidelines since at least 2022 when I
pointed out that this should not use a tarball as source.
The issue has not been addressed since, despite @patlefort's request
for the same from this year.
Maintainer blatantly follows this practice with all their AUR '-git'
packages, despite multiple requests from different users to make the
necessary packaging corrections.
There are other issues here, like:
- compiling source code inside package(),
- and forcing a static build with musl instead of making a regular
gcc/glibc compilation, and static-bundling a heavily vulnerable old
version of cjson (copy-pasted cJSON.{c,h} from 2020 to the source
distribution) instead of using the most secure, API-compatible release
[a], available as a shared lib in Arch/extra/cjson.
There is no actual evidence that anyone is using this off of AUR.
Votes: 0
Popularity: 0.000000
Last comments apart from the packaging rule violation related ones
(mine from 2022 and @patlefort's from 2024) are from 2020.
[a]:
https://github.com/DaveGamble/cJSON/compare/v1.7.14...v1.7.18
[1] https://aur.archlinux.org/account/MarsSeed/
[2] https://aur.archlinux.org/pkgbase/automedia-git/
