I do strongly feel that more BUILD_DEPENDS bloat is a Bad Thing, and it
occurred to me that there's no reason we cannot run audit-packages right
from the source tree.

There's only a handful of @var@ substitutions; if those were assigned into
shell variables at the top, e.g.:

: ${PKG_SYSCONFDIR:=@PKG_SYSCONFDIR@}

and the code in bsd.pkg.mk set these explicitly, the script should run in
place without requiring that it be installed to LOCALBASE.  Chicken-and-egg
problem solved.

-- 
-- Todd Vierling <tv@duh.org> <tv@pobox.com> <todd@vierling.name>