$ cvs -Qz3 -d joda@cvs.netbsd.org:/cvsroot co -d pkgsrc2 pkgsrc
$ cd pkgsrc2/sysutils/xdu
$ make 
===> *** No /usr/misc/home/joda/netbsd/pkgsrc2/distfiles/pkg-vulnerabilities file found,
===> *** skipping vulnerability checks. To fix, install
===> *** the pkgsrc/security/audit-packages package and run
===> *** '/usr/pkg/sbin/download-vulnerability-list'.
=> xdu-3.0.tar.Z doesn't seem to exist on this system.
=> Attempting to fetch xdu-3.0.tar.Z from http://sd.wareonearth.com/~phil/xdu/.
=> [20114 bytes]
Requesting http://sd.wareonearth.com/~phil/xdu/xdu-3.0.tar.Z
100% |*************************************| 20114      15.34 KB/s    00:00 ETA
20114 bytes retrieved in 00:01 (15.30 KB/s)
=> Checksum OK for xdu-3.0.tar.Z.
===> Extracting for xdu-3.0nb4
===> Required installed package xpkgwedge>=1.5: xpkgwedge-1.7 found
===> Required package gcc>=2.8.0: NOT found
===> Verifying reinstall for ../../lang/gcc ^C
$ gcc -dumpversion
3.3.2nb1

So, how are you supposed to build packages these days? xdu is just an
example. All these random changes are getting quite annoying, and it's
not just with pkgsrc.

/Johan