Package Details: libcatch-cpp-headers 1.12.1-1

Git Clone URL: https://aur.archlinux.org/libcatch-cpp-headers.git (read-only, click to copy)
Package Base: libcatch-cpp-headers
Description: C++-native framework for unit-tests using only a header file
Upstream URL: http://catch-lib.net
Keywords: bdd development library tdd
Licenses: boost
Submitter: yozi
Maintainer: bryanvalente
Last Packager: yozi
Votes: 10
Popularity: 0.000000
First Submitted: 2015-01-20 00:47 (UTC)
Last Updated: 2018-04-28 14:53 (UTC)

Latest Comments

yozi commented on 2026-06-12 14:35 (UTC) (edited on 2026-06-12 15:00 (UTC) by yozi)

Hi! Here's a update and heads up from me (the original creator of this package).

  1. According to my email inbox, the AUR user @MarsSeed filed an orphan request for this package on 2022-11-02 with the message "Unmaintained package". They were right of course; I stopped maintaining this package in 2018. I apologize to all who used it for the lack of communication and updates.

  2. I have no desire to keep maintaining this package. As an aside, https://aur.archlinux.org/packages/catch2-git is slightly more maintained (though it is a VCS-style package so doesn't really replace this one). EDIT Also Catch v2 and v3 are both in the official extra repo, and since the upstream Catch1.x branch has not seen updates since 2023, maybe this package should be removed completely? I would be OK with that.

  3. Today I got an email with an "AUR Ownership Notification" stating that AUR user @bryanvalente had adopted the package. I see that it is a newly registered account. I checked the other packages maintained by that user and it looks like there may be something fishy going on! I noticed some suspicious activity similar to the comment over here: https://aur.archlinux.org/packages/gitfs#comment-1075018

Quoting @kseistrup from that link:

kseistrup commented on 2026-06-12 12:28 (UTC) (edited on 2026-06-12 12:28 (UTC) by kseistrup)

Please notice that the latest repo commit contains a gitfs-deps.install that installs "uuid minimist js-digest". Is this legit (in the light of the latest compromises)?

But.. most of the suspicious activity I noticed has already disappeard, it seems.

So... trust but verify, folks! Be careful.

@bryanvalente, if you're human and want to maintain this package, keep in mind that you have some trust to earn first.

EDIT #2

It seems that this may be part of an ongoing aur-wide attack: https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/FGXPCB3ZVCJIV7FX323SBAX2JHYB7ZS4/

yozi commented on 2017-11-26 18:28 (UTC)

With the recent name change [1] in mind, I'm mulling over the idea of creating a "libcatch2-cpp-headers" package instead of migrating this package to a 2.X.Y version. Anyone see a good reason not to do that? [1] http://www.levelofindirection.com/journal/2017/11/3/catch2-released.html

cptiglo commented on 2017-09-13 20:09 (UTC)

The SHA checksum for catch.hpp does not validate!

verri commented on 2017-05-01 20:11 (UTC)

The file LICENSE_1_0.txt has been renamed to LICENSE.txt. Line 11 should be changed as such.

yozi commented on 2017-03-06 18:32 (UTC)

@verri: thanks.

verri commented on 2017-03-06 17:53 (UTC)

A "v" is missing before ${pkgver} at "LICENSE::https://raw.githubusercontent.com/philsquared/Catch/${pkgver}/LICENSE_1_0.txt" It should be: "LICENSE::https://raw.githubusercontent.com/philsquared/Catch/v${pkgver}/LICENSE_1_0.txt"

DvdGC commented on 2016-12-01 13:03 (UTC)

catch.hpp sha256sum fails, as the file has been recently updated. Maybe get the source from a particular version is better than from master.

ptb commented on 2015-04-10 07:14 (UTC)

I would recommend to use the pkgver to update the package version automatically. http://pastebin.com/0t0rd7CU

yozi commented on 2015-02-02 00:23 (UTC)

Wrong URL in the source array, it was downloading the webpage rather than the raw file. Oops. Fixed now.

mSSM commented on 2015-02-01 22:58 (UTC)

The LICENSE doesn't pass the SHA256 check.