What changed, and why it matters
This commit removes leftover documentation and example files from the Boost dependency after it is built. It is a cleanup change with no apparent security relevance.
No security action needed. Treat as routine build cleanup.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch adds a postprocess step to the Boost depends package that deletes the ‘share’ directory after Boost is staged. This directory typically contains Boost’s installed documentation, examples, and CMake helpers. It does not alter compiled code, runtime behavior, or the build process in a security-sensitive way.
Changed components
depends/packages/boost.mkInspect captured patch +4 / −0
diff --git a/depends/packages/boost.mk b/depends/packages/boost.mk
index 02f59abe..59e17f36 100644
--- a/depends/packages/boost.mk
+++ b/depends/packages/boost.mk
@@ -24,3 +24,7 @@ endef
define $(package)_stage_cmds
$(MAKE) DESTDIR=$($(package)_staging_dir) install
endef
+
+define $(package)_postprocess_cmds
+ rm -rf share
+endef
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.