pkg audit: security problems only

2021-11-19 Thread Andriy Gapon
Is there an option to limit pkg audit to report security problems only? Right now the corresponding periodic script reports a lot of (what I consider to be) noise every night. It's about deprecated packages, mostly depending on python 2.7. And I consider those reports to be noise because 90

Re: pkg audit: security problems only

2021-11-19 Thread Baptiste Daroussin
On Fri, Nov 19, 2021 at 10:31:37AM +0200, Andriy Gapon wrote: > > Is there an option to limit pkg audit to report security problems only? > > Right now the corresponding periodic script reports a lot of (what I > consider to be) noise every night. It's about deprecated packages, mostly > dependi

Re: pkg audit: security problems only

2021-11-19 Thread Andriy Gapon
On 19/11/2021 10:47, Baptiste Daroussin wrote: On Fri, Nov 19, 2021 at 10:31:37AM +0200, Andriy Gapon wrote: Is there an option to limit pkg audit to report security problems only? Right now the corresponding periodic script reports a lot of (what I consider to be) noise every night. It's abo

FreeBSD ports you maintain which are out of date

2021-11-19 Thread portscout
Dear port maintainer, The portscout new distfile checker has detected that one or more of your ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. If any ports have already been updated, you

qt5-webengine and py27 ?

2021-11-19 Thread Mike Clarke
I'm getting seriously confused about packages with dependency on py27. Daily periodic reports from pkg-audit report 39 deprecated packages which use EOL Python 2.7, most of them via www/qt5-webengine. For example: "kmail-21.08.3: Tag: deprecated Value: Uses EOL Python 2.7 via www/qt5-webengine

Re: qt5-webengine and py27 ?

2021-11-19 Thread Robert Clausecker
Hi Mike, Python 2.7 is a build dependency of this port. It is needed AFAIK as a part of the webkit build system. Yours, Robert Clausecker Am Fri, Nov 19, 2021 at 03:34:03PM + schrieb Mike Clarke: > I'm getting seriously confused about packages with dependency on py27. > > Daily periodic re

Request review on new port submission: p5-B-Debug

2021-11-19 Thread James E Keenan
Would it be possible to review the following port submission (originally submitted in September)? https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258350 This ports Perl CPAN distribution B-Debug, which is now needed as a prerequisite to a more important port, p5-Devel-Cover. Thank you very

Re: qt5-webengine and py27 ?

2021-11-19 Thread Tatsuki Makino
I think it shows up because it is written directly in /usr/ports/deskutils/kmail/Makefile. I think it's a warning that when Python 2.7 is completely removed, qt5-webengine cannot be built, and therefore kmail using qt5-webengine cannot be used either.

Re: Bringing back lang/python27 with few modules?

2021-11-19 Thread Mel Pilgrim
On 2021-11-18 0:43, Eugene Grosbein wrote: 17.11.2021 17:16, Rene Ladan wrote: On Wed, Nov 17, 2021 at 12:37:07AM -0800, Maxim Sobolev wrote: P.S. AFAIK our documented criteria for removing a port is when one of the following is true: o Port lacks maintaintership; o Port has issues building

Re: Regarding port(s) you maintain in FreeBSD ports collection

2021-11-19 Thread Miroslav Lachman
On 16/11/2021 22:46, Daniel Engberg wrote: Hi Mikhail, There are numerous of reason why we need to remove ports, one major reason is simply to have a sustainable repository. One example is the deprecation of Python 2.x which is long overdue but we're slowly getting there because there still

Re: Bringing back lang/python27 with few modules?

2021-11-19 Thread Maxim Sobolev
Well with regards to a language port, "vulnerability" has somewhat dubious applicability. For sure there are many ways to write an insecure C program allowed by the language itself. Shall we consider all C compilers inheretedly bad based on just that? Bottom line is that having well supported pyth

Re: Bringing back lang/python27 with few modules?

2021-11-19 Thread Jan Beich
Maxim Sobolev writes: > Well with regards to a language port, "vulnerability" has somewhat dubious > applicability. For sure there are many ways to write an insecure C program > allowed by the language itself. Shall we consider all C compilers > inheretedly bad based on just that? CPython provid