Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Dirk Eddelbuettel
On 18 February 2025 at 15:14, Iñaki Ucar wrote: | What happened in Rcpp is that the antivirus were detecting an old | version of ghostscript that could produce potentially vulnerable | outputs. We solved it by rebuilding the vignettes with a newer version | of ghostscript. This is most likely the

Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Ivan Krylov via R-package-devel
On Tue, 18 Feb 2025 08:11:15 -0600 Dirk Eddelbuettel wrote: > Maybe these do not tickle the silly anti-virsu tool. Looks like they don't, so no need to tinker with raw PDF bytes: https://www.virustotal.com/gui/url/2ef08a12060e046308afd6923b6447be10eafc36416b3af0734f724ce5127f22 (As they shouldn

Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Iñaki Ucar
On Tue, 18 Feb 2025 at 14:05, Dirk Eddelbuettel wrote: > > > Something that had happened to the Rcpp package in the past (but seemingly > went away on its own ?) is now apparently hitting package RcppArmadillo. > > I received private email from the CRAN maintainers reporting, without > offering a

Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Dirk Eddelbuettel
This really is Dadaism (or maybe Absurdism? Where are our art historians?) By now I heard from one of the affected scientists via a private slack message. A choice quote: basically the pdf is moved into quarantine, and our IT are now threatening us to format all our laptops This is beyon

Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Ivan Krylov via R-package-devel
On Tue, 18 Feb 2025 07:31:59 -0600 Dirk Eddelbuettel wrote: > I have no idea. They have not communicated with me. I am only the > relevant author so why whould they. That's unfortunate. I've just fed the RcppArmadillo-sparseMatrix vignette to VirusTotal, and, indeed, there is one match: https:

Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Dirk Eddelbuettel
On 18 February 2025 at 16:26, Ivan Krylov wrote: | On Tue, 18 Feb 2025 07:05:06 -0600 | Dirk Eddelbuettel wrote: | | > one of the two pdf vignettes (which I happen to create as a shallow | > Rnw -> pdf wrapper around a pre-made pdf, here that inner pdf had not | > changed in five years, sigh ..

Re: [R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Ivan Krylov via R-package-devel
On Tue, 18 Feb 2025 07:05:06 -0600 Dirk Eddelbuettel wrote: > one of the two pdf vignettes (which I happen to create as a shallow > Rnw -> pdf wrapper around a pre-made pdf, here that inner pdf had not > changed in five years, sigh ...) now upsets one of these (idiotic, > but hey, I am sure that

[R-pkg-devel] False positive antivirus reports on package vignettes

2025-02-18 Thread Dirk Eddelbuettel
Something that had happened to the Rcpp package in the past (but seemingly went away on its own ?) is now apparently hitting package RcppArmadillo. I received private email from the CRAN maintainers reporting, without offering a fix as there seems to be none, that one of the two pdf vignettes (w

Re: [R-pkg-devel] How to fix "attribute "id" has invalid value" when submitting new package to CRAN

2025-02-18 Thread Ivan Krylov via R-package-devel
Dear Han Zhang, Welcome to R-package-devel! В Mon, 17 Feb 2025 23:28:24 -0500 Han Zhang пишет: > Found the following > HTML validation problems: GraphicalTesting.html:114:1 > (GraphicalTesting.Rd:170): Warning: attribute "id" has invalid > value "method-Graphical Testing Procedure-new" Thank

[R-pkg-devel] How to fix "attribute "id" has invalid value" when submitting new package to CRAN

2025-02-18 Thread Han Zhang
Hi, It is my first time to see this NOTE when submitting a new package to CRAN. It seems to happen on Debian and Windows, but I don't have a machine with those OS installed. I searched for this note but did not find solutions. Please advise. Thank you. * checking HTML version of manual ... [1s/1