- use sha512sums
- try to separate python builds (don't do everything in packae(). Why: Because of reproducible builds)
Here is a good example: https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/python-black
- use sha512sums
- try to format your pkgbuilds with
shfmt
(pacman -S shfmt
) cd $srcdir
is not necessary, makepkg always starts in$srcdir
.- always encapsulate variables like pkgdir with double quotes
- use sha512sums
- I haven't tested it, but make sure to run
namcap
after the build for finding errors or warnings. This package might have no FULL RELRO and other security features. Some devs set different LDFLAGs in their makefile
- this package looks fundamentally broken and old.
- try to use the original source at github: https://github.com/trentm/cmdln
- You should rewrite the whole pkgbuild, if possible.
Ok, thank you for your time :) I'll show you the updated pkgs here: https://github.com/jcstr/pkgbuilds