Bug 221343 – sci-electronics/vbs: suspect runtime-depend on sys-devel/flex

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Diego Elio Pettenò (RETIRED) 2008-05-11 12:44:30 UTC]

Your package is runtime-depending on sys-devel/flex standing to http://tinderbox.dev.gentoo.org/misc/rindex/sys-devel/flex . Flex is a tool used almost always at build-time, as it generates the source code for a parser. This means that it should only be depended at build-time.

Please correct your ebuild or document why it is used as a runtime-dependency so that it will not be suspected again.

Thanks,
Diego

[Comment 1 Denis Dupeyron (RETIRED) 2008-05-11 18:17:30 UTC]

Diego,

I always believed flex to be an implicit dependency since it's in the base profile... Was I wrong ? You filed other bugs like this one but I'm only commenting here to avoid bugspaming you.

Denis.

[Comment 2 Diego Elio Pettenò (RETIRED) 2008-05-11 18:21:12 UTC]

See bug #221311, the idea is to get flex out of the system package set, to better track what is really using it (in case of new releases, vulnerabilities and similar).

[Comment 3 Denis Dupeyron (RETIRED) 2008-05-11 18:23:54 UTC]

I didn't see it there was tracker for this thing, sorry about that. I'll fix it ASAP.

Denis.

[Comment 4 Denis Dupeyron (RETIRED) 2009-07-12 06:19:23 UTC]

This should be fixed now, with an explicit RDEPEND="".

Denis.