Gentoo QA checks

• ebuild_homepage_bad_rating

  full | main | pack
  Lists ebuilds with a Homepage(IP) which has an bad rating from abuseipdb
  
  Data Format ( 7|100|2021-06-01|dev-libs/foo|foo-1.12-r2.ebuild|https://foo.bar.com|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  100                                         rating from abuseipdb (everything above 0)
  2021-06-01                                  date of check
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  https://foo.bar.com                         original hommepage in ebuild
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_homepage_bad_statuscode

  full | main | pack | filter
  This checks tests every homepage and gets their http return code. The list contain packages with a bad returncodes.
  Following statuscodes are ignored: FTP, 200, 301, 302, 307, 400, 503.
  This check only runs if a package changed, thus the acutal status might not be correct anymore.
  
  Data Format ( 7|404|2021-06-01|dev-libs/foo|foo-1.12-r2.ebuild|https://foo.bar.com|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  404                                         http statuscode
  2021-06-01                                  date of check
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  https://foo.bar.com                         homepage corresponding to the statuscode
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_homepage_redirections

  full | main | pack
  Lists ebuilds with a Homepage which actually redirects to another sites.
  This check only runs if a package changed, thus the acutal status might not be correct anymore.
  
  Data Format ( 7|404|2021-06-01|dev-libs/foo|foo-1.12-r2.ebuild|https://foo.bar.com|https://bar.foo.com|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  404                                         http statuscode of redirected website
  2021-06-01                                  date of check
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  https://foo.bar.com                         original hommepage in ebuild
  https://bar.foo.com                         redirected homepage
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_insecure_git_uri_usage

  full | main | pack
  Ebuilds shouldn't use git:// for git repos because its insecure. Should be replaced with https://
  Also see: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_insecure_init_scripts

  full | main | pack
  Ebuilds shouldn't use chown -R or chmod -R in init scripts. This is a security threat.
  Also see: Link
  
  Data Format ( dev-libs/foo|dev@gentoo.org:loper@foo.de ):
  dev-libs/foo                                package category/name
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_insecure_pkg_post_config

  full | main | pack
  Ebuilds shouldn't use chown -R or chmod -R in pkg_postinst and pkg_config. This is a security threat
  Also see: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_install_worthless_file_install

  full | main | pack
  Ebuilds shouldn't install "INSTALL". (with exceptions)
  Also see: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_leading_trailing_whitespaces_in_variables

  full | main | pack | filter
  Simple check to find leading or trailing whitespaces in a set of variables.
  For example: SRC_URI=" www.foo.com/bar.tar.gz "
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|DEPEND:SRC_URI|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  DEPEND:SRC_URI                              list of variables which have unusual whitespaces, seperated by ':'
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_missing_eclasses

  full | main | pack | filter
  Lists ebuilds which use functions of eclasses which are not directly inherited. (usually inherited implicit)
  Following eclasses are checked:
  ltprune, eutils, estack, preserve-libs, vcs-clean, epatch,
  desktop, versionator, user, eapi7-ver, flag-o-matic, libtool, pam, udev, xdg-utils
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|user(enewuser):udev(edev_get)|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  user(enewuser):udev(edev_get)               eclasse(s) and function name the ebuild uses but not inherits, seperated by ':'
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_multiple_deps_per_line

  full | main | pack
  Ebuilds which have multiple dependencies written in one line like: || ( app-arch/foo app-arch/bar )
  Should look like: || (
  app-arch/foo
  app-arch/bar
  )
  Also see at: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_nonexist_dependency

  full | main | pack | filter
  This checks the ebuilds *DEPEND* Blocks for packages which doesn't exist anymore.
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|sys-apps/bar:dev-libs/libdir(2015-08-13)|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  sys-apps/bar:dev-libs/libdir(2015-08-13)    non-existing package(s). If removed after git migration a removal date is shown.
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_obsolete_dependency_tracking

  full | main | pack
  Ebuilds don't need to specifiy --disable-dependency-tracking in econf.
  This is automatically specified from EAPI4.
  Also see: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_obsolete_disable_static

  full | main | pack
  Ebuilds don't need to specifiy --disable-static in econf.
  This is automatically specified from EAPI8.
  Also see: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_obsolete_silent_rules

  full | main | pack
  Ebuilds don't need to specifiy --disable-silent-rules in econf.
  This is automatically specified from EAPI5.
  Also see: Link
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_obsolete_virtual

  full | main | pack
  Lists virtuals were only one provider is still available.
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_src_uri_bad

  full | main | pack
  This check uses wget's spider functionality to check if a ebuild's SRC_URI link still works.
  The timeout to try to get a file is 15 seconds. This exculdes mirror:// links.
  
  Data Format ( 7|2021-06-01|dev-libs/foo|foo-1.12-r2.ebuild|https://foo.bar.com/bar.zip|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  2021-06-01                                  date of check
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  https://foo.bar.com/bar.zip                 file which is not available
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_src_uri_file_offline

  full | main | pack
  Similar to ebuild_src_uri_bad this tries to download the sources from a ebuild. However it simply uses ebuild ... fetch in order
  todo so. This way mirror:// links won't be excluded.
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_src_uri_offline

  full | main | pack
  Packages which can't be installed because the SRC_URI is offline and RESTRICT="mirror" enabled.
  
  Data Format ( 7|2021-06-01|dev-libs/foo|foo-1.12-r2.ebuild|https://foo.bar.com/bar.zip|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  2021-06-01                                  date of check
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  https://foo.bar.com/bar.zip                 file which is not available and mirror restricted
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_src_uri_size_mismatch

  full | main | pack
  Calls GENTOO_MIRRORS="" ebuild package fetch. This should catch problems like fetches file(s) that do not match recorded_size
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_unused_eclasses

  full | main | pack | filter
  Lists ebuilds which inherit eclasses but doesn't use their features.
  Following eclasses are checked:
  ltprune, eutils, estack, preserve-libs, vcs-clean, epatch, desktop,
  versionator, user, eapi7-ver, flag-o-matic, libtool, pam, udev, xdg-utils
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|user:udev|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  user:udev                                   eclasse(s) the ebuild inherits but not uses, seperated by ':'
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_unused_patches

  full | main | pack
  Extensive check to find unused pachtes. In order to reduce flase positives it uses a whilelist to exclude them.
  
  Data Format ( dev-libs/foo|foo-fix-1.12.patch|dev@gentoo.org:loper@foo.de ):
  dev-libs/foo                                package category/name
  foo-fix-1.12.patch                          patch which is not used by any ebuild
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• ebuild_variable_missing_braces

  full | main | pack | filter
  Simple check to find variables which not use curly braces.
  Only a certain set of variables are being checked.
  
  Data Format ( 7|dev-libs/foo|foo-1.12-r2.ebuild|DEPEND:SRC_URI|dev@gentoo.org:loper@foo.de ):
  7                                           EAPI Version
  dev-libs/foo                                package category/name
  foo-1.12-r2.ebuild                          full filename
  DEPEND:SRC_URI                              list of variables which not use curly braces, seperated by ':'
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• metadata_duplicate_useflag_description

  full | main | pack | filter
  Lists packages which define use flags locally in metadata.xml, which already exists as
  a global use flag.
  
  Data Format ( dev-libs/foo|gtk[:X:qt:zlib]|dev@gentoo.org:loper@foo.de ):
  dev-libs/foo                                package category/name
  gtk[:X:qt:zlib]                             list of USE flags which already exists as a global flag.
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• metadata_mixed_indentation

  full | main | pack
  Checks metadata files (metadata.xml) if it uses mixed tabs and whitespaces.
  
  Data Format ( dev-libs/foo|metadata.xml|dev@gentoo.org:loper@foo.de ):
  dev-libs/foo                                package category/name
  metadata.xml                                metadata filename
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'
  				

• packages_pkgcheck_scan

  full | main | pack | filter
  A script which runs 'pkgcheck scan --net --keywords=-info -q' on every package. The result is also filtered
  by pkgcheck keywords.
  
  Data Format ( dev-libs/foo|RequiredUseDefaults:RedirectedUrl|dev@gentoo.org:loper@foo.de ):
  dev-libs/foo                                package category/name
  RequiredUseDefaults:RedirectedUrl           pkgcheck problem(s), seperated by ':'
  dev@gentoo.org:loper@foo.de                 maintainer(s), seperated by ':'