Re: Some ports uses git while make configure to load deps

On 2022-11-16 02:14 +0200, Rozhuk Ivan wrote:
> Hi!
> 
> 
> I see this many times with different ports, for example: graphics/evince.
> Probably this is new meson behaviour.
<snip> 
> 
> Does it violates some ports requirements to not load anything that not covered by "make makesum"?

I would think if the port had a commit hash pinned it would be fine but.

I took a look at graphics/evince and it seems to just pull down the main branch?  
That's kind disturbing as it would not always match what the port creator tested 
when making the port.  It also makes any kind of auditing useless.


Amar.