Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#39936 - [agg] is dead, upstream gone, cannot fetch tarball

Attached to Project: Community Packages
Opened by Roman Neuhauser (roman-neuhauser) - Friday, 18 April 2014, 13:06 GMT
Last edited by Felix Yan (felixonmars) - Saturday, 19 April 2014, 06:39 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Felix Yan (felixonmars)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

http://antigrain.com/ says

antigrain.com expired on 04/09/2014 and is pending renewal or deletion.

roman@wrench MINE/home:roman-neuhauser:arch-community/agg 1206:0 > makepkg -rs
==> Making package: agg 2.5-5 (Fri Apr 18 15:06:24 CEST 2014)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Downloading agg-2.5.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 272 100 272 0 0 147 0 0:00:01 0:00:01 --:--:-- 147
-> Found agg-2.4-depends.patch
-> Found agg-2.5-pkgconfig.patch
-> Found autotools.patch
==> Validating source files with md5sums...
agg-2.5.tar.gz ... FAILED
agg-2.4-depends.patch ... Passed
agg-2.5-pkgconfig.patch ... Passed
autotools.patch ... Passed
==> ERROR: One or more files did not pass the validity check!
roman@wrench MINE/home:roman-neuhauser:arch-community/agg 1207:1 > cat agg-2.5.tar.gz
<html>
<head>
<meta name="robots" content="noarchive" />
<meta name="googlebot" content="nosnippet" />
</head>
<body>
<div align=center>
<h3>Error. Page cannot be displayed. Please contact your service provider for more details. (13)</h3>
</div>
</body>
</html>% roman@wrench MINE/home:roman-neuhauser:arch-community/agg 1208:0 >


Additional info:
* package version(s)
* config and/or log files etc.


Steps to reproduce:
This task depends upon

Closed by  Felix Yan (felixonmars)
Saturday, 19 April 2014, 06:39 GMT
Reason for closing:  Fixed
Additional comments about closing:  community-testing/agg 1:2.4r93-1
Comment by Doug Newgard (Scimmia) - Friday, 18 April 2014, 13:32 GMT
Orphan, assigning to last packager.
Comment by Andrea Scarpino (BaSh) - Friday, 18 April 2014, 19:10 GMT
It's needed by gnash, assigning to Jan
Comment by Jan Alexander Steffens (heftig) - Friday, 18 April 2014, 19:39 GMT
I'm not interested in this, either. Finally gave gnash the boot (to the AUR).

The only remaining user is python-matplotlib. Reassigning to Felix.

Maybe python-matplotlib can drop its optional dependency on agg.
Comment by Roman Neuhauser (roman-neuhauser) - Saturday, 19 April 2014, 02:08 GMT
> Maybe python-matplotlib can drop its optional dependency on agg.

agg is GPL, at least according to https://www.archlinux.org/packages/community/x86_64/agg/. i don't see how ArchLinux can continue to distribute the binary package (https://www.archlinux.org/packages/community/x86_64/agg/download/) without being able to fulfill the licensing obligation to provide sources as well.
Comment by Felix Yan (felixonmars) - Saturday, 19 April 2014, 02:15 GMT
We don't want to be upstream for a dead upstream software taking responsibility for e.g. security problems in it.

But for agg, there's an active fork available on sourceforge, based on the 2.4 version, but doesn't yield a numbered release. If you feel like okay, I'll switch the agg package to use a svn snapshot of this fork.

(According to Wikipedia, the 2.5 release is "virtually the same" as 2.4, but changing license from BSD to GPL. The fork is maintaining the source at BSD license)
Comment by Roman Neuhauser (roman-neuhauser) - Saturday, 19 April 2014, 02:27 GMT
actually, i don't use agg at all, i got here through my sweep across unfetchable/unbuildable packages in "community". go for whatever fix you deem makes most sense.

Loading...