https://bugzilla.redhat.com/show_bug.cgi?id=1371340 Olivier Lemasle <o.lemasle@xxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |o.lemasle@xxxxxxxxx --- Comment #3 from Olivier Lemasle <o.lemasle@xxxxxxxxx> --- This package seems to have some issues (see below). I'm not yet a maintainer, as I haven't been sponsored, so this comment is unofficial. - The source tarball includes multiple bundled libraries in the "vendor" directory, like zendframework, picofeed, etc. According to the Fedora Packaging Guidelines, these should not be bundled, as system libraries should be used. - Config file /usr/share/miniflux/config.php should not be under /usr - As noted in the rpmlint output, this package includes .htaccess files, which should be replaced by central configuration in /etc/, which is less vulnerable to attack (See https://fedoraproject.org/wiki/Apache_HTTP_Server#Installing_webapps) Additionally, new releases of Miniflux have been released since the original upload of the SPEC (last: 1.2.1) -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx