Package Details: packetry 0.5.0-2

Git Clone URL: https://aur.archlinux.org/packetry.git (read-only, click to copy)
Package Base: packetry
Description: USB 2.0 protocol analysis app for use with Cynthion
Upstream URL: https://github.com/greatscottgadgets/packetry
Licenses: BSD-3-Clause
Submitter: Auerhuhn
Maintainer: Auerhuhn
Last Packager: Auerhuhn
Votes: 0
Popularity: 0.000000
First Submitted: 2024-07-17 10:58 (UTC)
Last Updated: 2025-12-07 22:58 (UTC)

Latest Comments

Deppy commented on 2025-12-08 02:06 (UTC)

@Auerhuhn Awesome, thanks for the quick response and analysis!

Auerhuhn commented on 2025-12-07 23:04 (UTC)

@Deppy Turns out that shortly after the v0.5.0 release, upstream moved the v0.5.0 tag forward in time.

Moving Git tags (in fact, any action that causes a reproducible checksum mismatch) is generally a red flag and warrants a closer look.
It’s benign most of the time, but supply chain attacks do happen so I’ve made it a habit to do an extra thorough analysis whenever this occurs.

In this case, however, I can conclude that the re-tagging happened in good faith and that it was just an attempt by upstream to fix their CI pipeline.
See my commit message for details.

I just pushed a 0.5.0-2 pkgrel to update the checksum.
Thanks again for reporting the mismatch!

Auerhuhn commented on 2025-12-07 21:34 (UTC)

@Deppy Thanks for the pointer.

I can confirm that at one point between September 30 and today, the hash of the source tarball has changed. I’m going to try and figure out what exactly happened and then report back.

Deppy commented on 2025-12-07 21:29 (UTC)

I'm getting a validation error trying to install this. The hash of the downloaded source tarball doesn't seem to match the hash in PKGBUILD for some reason:

$ wget https://github.com/greatscottgadgets/packetry/archive/v0.5.0.tar.gz
$ sha512sum v0.5.0.tar.gz
d943d949401315b5fcbda9f46de84cd1510e5c30f8c1689be1f379e496ff32ed69f26f6c3d27b7318c4e2c478514b53e7e912358fda58da3b9383703e5ed00e0  v0.5.0.tar.gz

Auerhuhn commented on 2025-02-12 08:23 (UTC)

@Coelacanthus Updated, thanks for the suggestions!

Coelacanthus commented on 2025-02-11 16:42 (UTC)

And suggest remove !debug from options array and leave it to user's decision via options array in makepkg.conf.

Coelacanthus commented on 2025-02-11 16:41 (UTC)

Please add !lto to options array otherwise it will lead to tons of undefined symbols about libgit2.