Are popular, but unmaintained, packages permitted in the repositories? If it can't be generalised, why does ClamTK remain?

Ask Fedora
1

When I commented the undermentioned:

…I wondered why, or better yet, how, clamtk remains available in the main repositories - surely without maintenance, its dependencies age and it becomes less secure?

To extrapolate to all unmaintained packages, are these deliberately retained, or this example an oversight?

2

another example libaudiofile.

3

@xoipeins, do you refer to audiofile - Fedora Packages, or the .so, which libaudiofile - Google Search predominantly returns?

I ask because if the latter, I think a specific file (presumably acquired via a git submodule) would be the purview of the application developer, rather than the package repository administrators. However, it would usually contribute to a package being designated as unmaintained, I suppose.

4

Sorry the thread title just want me to drop the name libaudiofile. i have to explain.

there is a bug report lately for mpd (which is only in rpmfusion) at archlinux (Discussion/rfc) Should libaudiofile dependency be removed? (#2) · Issues · Arch Linux / Packaging / Packages / mpd · GitLab

i notice then that libaudiofile is disabled by debian on Sun, 17 Apr 2022 23:27:47 +0800 https://metadata.ftp-master.debian.org/changelogs//main/m/mpd/mpd_0.23.12-1_changelog

the rpmfusion build of mpd just use libaudiofile as far as i can tell if you look at the build logs.

1 Like
5

You can see who is keeping a package in Fedora Linux and what changes they are making at src.fp.o. To wit: PR#33: WIP: Update to 1.4.X - rpms/clamav - src.fedoraproject.org

1 Like
6

@glb, so in its case, it’s being patched? (Or is it in effect a fork at this point?)

7

It looks like there are some downstream patch files. I guess you can browse the commit history to see more of what is being done with it. But at a glance, it doesn’t look like much to me. Maybe it is just being kept around for the EPEL branch and that it is also in the Fedora branches is more or less accidental? I think some stuff for Red Hat (via EPEL?) has to be kept around for an extra long time? I don’t really know. But that would be my guess.

For example: Commit - rpms/clamav - 3d80a69b4f1c745a58d75a13334af118552d6ed3 - src.fedoraproject.org

2 Likes
8

@glb, I’ll hope so, considering that just closing its GUI a moment ago was enough to SIGABRT it - 2319553 – [abrt] clamtk: g_malloc0(): perl killed by SIGABRT… Thanks.