[Buildroot] Untractably slow CVE checks in support/scripts/pkg-stat

Thomas Petazzoni thomas.petazzoni at bootlin.com
Thu Feb 27 16:54:43 UTC 2020

Hello Titouan,

On Thu, 27 Feb 2020 16:05:41 +0100
Titouan Christophe <titouan.christophe at railnova.eu> wrote:

> 1. Uninstall the version distributed by apt:
>     `apt remove python-ijson`
> 2. Install the latest version with pip:
>     `pip install [--user] ijson`
> 3. Start the pkg-stat script, it should complete in less than 5 minutes.

Thanks a lot for the investigation and research!

I tested with ijson 2.6 installed from pip, and things are indeed a lot
better. It's not 5 minutes though:

real	19m55.557s
user	18m7.632s
sys	1m53.140s

Best regards,

Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering

More information about the buildroot mailing list