Subject: Re: Alternate solution for audit-packages: run in-tree
To: Hubert Feyrer <feyrer@cs.stevens.edu>
From: Todd Vierling <tv@duh.org>
List: tech-pkg
Date: 11/22/2005 18:05:21
On Tue, 22 Nov 2005, Hubert Feyrer wrote:

> > I do strongly feel that more BUILD_DEPENDS bloat is a Bad Thing, and it
> > occurred to me that there's no reason we cannot run audit-packages right
> > from the source tree.
>
> I'd be happy if I audit-packages wasn't forced upon me at all!

I said nothing of the sort.  I still contend that in the absence of a
pkg-vulnerabilities file, pkgsrc should warn and go on its merry way.  I was
offering a replacement for the (now removed) standalone vulnerability check
that used to be in bsd.pkg.mk.

-- 
-- Todd Vierling <tv@duh.org> <tv@pobox.com> <todd@vierling.name>