source file audit - 2008-11-14

Kevin Fenzi kevin at scrye.com
Sun Nov 23 23:15:43 UTC 2008


On Thu, 20 Nov 2008 19:01:13 -0500
tcallawa at redhat.com ("Tom \"spot\" Callaway") wrote:

> On Wed, 2008-11-19 at 17:09 -0700, Kevin Fenzi wrote:
> > spot:BADSOURCE:daa2iso.zip:daa2iso
> 
> Upstream doesn't embed version in their zip file, they just do new
> releases with the same filename, which causes this. I emailed them to
> ask them not to do that, but they replied that they like it like that.
> This also pointed out that upstream had done a new release, so I
> pushed an update.

:( 

...snipp...

> > spot:BADURL:alsamixergui-0.9.0rc1-2.tar.gz:alsamixergui
> 
> upstream website is gone.

I guess the Source0 should just be a filename now?

> > spot:BADURL:amanith_03.tar.gz:amanith
> 
> upstream is no longer working on this code and has taken it down.

Same here... no url, just a file now?

> > spot:BADURL:Class-DBI-Loader-Relationship-1.3.tar.gz:perl-Class-DBI-Loader-Relationship
> 
> Umm. I'm not sure how I ended up with a version that CPAN doesn't know
> about, but it seems legit.

ok. 

...snip...

> > spot:BADURL:google-perftools-0.99.1.tar.gz:google-perftools
> 
> I'm guessing this was due to your googlecode burping.

yep. I need to get spectool to not use wget -N it seems. ;( 

...snipp..

> > spot:BADURL:kscope-1.6.2.tar.gz:kscope
> 
> Dunno why this one flagged, it all looks good to me.

Looks like a sourceforge redirecting to some other site: 

--20:25:02--  http://download.sourceforge.net/kscope/kscope-1.6.2.tar.gz
Resolving download.sourceforge.net... 128.101.240.209, 150.65.7.130, 212.219.56.167, ...
Connecting to download.sourceforge.net|128.101.240.209|:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://mir1.ovh.net/kscope/kscope-1.6.2.tar.gz [following]
--20:25:03--  http://mir1.ovh.net/kscope/kscope-1.6.2.tar.gz
Resolving mir1.ovh.net... 213.186.33.37
Connecting to mir1.ovh.net|213.186.33.37|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
20:25:03 ERROR 404: Not Found.

...snipp...

> > spot:BADURL:libmcrypt-2.5.8.tar.gz:libmcrypt
> 
> Not sure why this failed, it all looks good on my end.

Another sourceforge hiccup. ;( 
--22:25:25--  http://download.sourceforge.net/mcrypt/libmcrypt-2.5.8.tar.gz
Resolving download.sourceforge.net... 128.101.240.209, 150.65.7.130, 198.142.1.17, ...
Connecting to download.sourceforge.net|128.101.240.209|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
22:25:26 ERROR 404: Not Found.

...snipp...

> > spot:BADURL:pydot-1.0.2.tar.gz:pydot
> 
> Googlecode, looks fine on my end.

yep. 

...snipp...

> > spot:BADURL:ser2net-2.5.tar.gz:ser2net
> 
> Dunno why this one flagged, it all looks good to me.

Sourceforge hiccup: 
--15:01:27--  http://download.sourceforge.net/ser2net/ser2net-2.5.tar.gz
Resolving download.sourceforge.net... 128.101.240.209, 150.65.7.130, 193.1.219.87, ...
Connecting to download.sourceforge.net|128.101.240.209|:80... connected.
HTTP request sent, awaiting response... 504 Gateway Time-out
15:04:26 ERROR 504: Gateway Time-out.

> Thanks,

Thanks for fixing so many things so quickly. ;) 

> ~spot

kevin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20081123/5caf538b/attachment.bin 


More information about the devel mailing list