wip/py-chemlab has this: BROKEN= "downloads during build (distribute_setup.py)" What do we do in such situations anyway? There may have been such packages before. What are the implications (to pkgsrc build process and to security etc) if a package does so? Mayuresh