Johnny C. Lam wrote:
> Make check-vulnerable a source target for every phase of the build
> workflow, which ensures that it is always run if the user starts a
> new phase from the command line.

What's the rationale for this? The check-vulnerable target is pretty 
time-consuming, and as long as you don't do a three-months break between 
building a package and installing it, there's no benefit of it, is it?

If there is a benefit, I would like to see the answer in the pkgsrc 
guide in the "pkgsrc user's FAQ".

Roland