Subject: Re: Alternate solution for audit-packages: run in-tree
To: Hubert Feyrer <>
From: Todd Vierling <>
List: tech-pkg
Date: 11/22/2005 18:05:21
On Tue, 22 Nov 2005, Hubert Feyrer wrote:

> > I do strongly feel that more BUILD_DEPENDS bloat is a Bad Thing, and it
> > occurred to me that there's no reason we cannot run audit-packages right
> > from the source tree.
> I'd be happy if I audit-packages wasn't forced upon me at all!

I said nothing of the sort.  I still contend that in the absence of a
pkg-vulnerabilities file, pkgsrc should warn and go on its merry way.  I was
offering a replacement for the (now removed) standalone vulnerability check
that used to be in

-- Todd Vierling <> <> <>