haxe.aarch64: I: binary-or-shlib-calls-gethostbyname /usr/bin/haxe The binary calls gethostbyname(). Please port the code to use getaddrinfo(). haxe.aarch64: W: files-duplicate /usr/share/haxe/std/php/net/SslSocket.hx /usr/share/haxe/std/php7/net/SslSocket.hx haxe.aarch64: W: files-duplicate /usr/share/haxe/std/php7/_std/haxe/zip/Compress.hx /usr/share/haxe/std/php/_std/haxe/zip/Compress.hx haxe.aarch64: W: files-duplicate /usr/share/haxe/std/php7/_std/haxe/zip/Uncompress.hx /usr/share/haxe/std/php/_std/haxe/zip/Uncompress.hx haxe.aarch64: W: missing-call-to-chdir-with-chroot /usr/bin/haxe This executable appears to call chroot without using chdir to change the current directory. This is likely an error and permits an attacker to break out of the chroot by using fchdir. While that's not always a security issue, this has to be checked. haxe.aarch64: E: devel-file-in-non-devel-package (Badness: 50) /usr/share/haxe/std/cpp/NativeXmlImport.cpp A file that is needed only e.g. when developing or building software is included in a non-devel package. These files should go in devel packages. 2 packages and 0 specfiles checked; 1 errors, 4 warnings.