1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Package drop request: ruby-ParseTree
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Package%20drop%20request%3A%20ruby-ParseTree&In-Reply-To=%3C50C67332.6020509%40colin.guthr.ie%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="020730.html">
<LINK REL="Next" HREF="020735.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Package drop request: ruby-ParseTree</H1>
<B>Colin Guthrie</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Package%20drop%20request%3A%20ruby-ParseTree&In-Reply-To=%3C50C67332.6020509%40colin.guthr.ie%3E"
TITLE="[Mageia-dev] Package drop request: ruby-ParseTree">mageia at colin.guthr.ie
</A><BR>
<I>Tue Dec 11 00:41:38 CET 2012</I>
<P><UL>
<LI>Previous message: <A HREF="020730.html">[Mageia-dev] Package drop request: ruby-ParseTree
</A></li>
<LI>Next message: <A HREF="020735.html">[Mageia-dev] Package drop request: ruby-ParseTree
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#20732">[ date ]</a>
<a href="thread.html#20732">[ thread ]</a>
<a href="subject.html#20732">[ subject ]</a>
<a href="author.html#20732">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>'Twas brillig, and Remy CLOUARD at 10/12/12 22:42 did gyre and gimble:
><i> At first I didn’t even know task-obsolete existed in the first place so
</I>><i> I just followed the procedure Johnny explained. After understanding this
</I>><i> mechanism I don’t feel it was the right thing to do in this case.
</I>><i>
</I>><i> First, because it’s a small ruby library that’s probably used by only a
</I>><i> handful of people. Second, this library is removed because it’s eol’d
</I>><i> upstream, but also because no other package use it. It seems to me that
</I>><i> it can safely be removed from the mirrors, but removing it from boxes
</I>><i> via task-obsolete seems a bit overkill to me, because that package would
</I>><i> have been orphaned because nothing requires it (unless someone
</I>><i> deliberately installed it, which I doubt)
</I>><i>
</I>><i> I’m not yet sure about this but the way I see task-obsolete is that it
</I>><i> should only be used for end-applications, and even then I’m not
</I>><i> comfortable with silently removing things from people’s machines, I’d
</I>><i> rather use Conflicts instead.
</I>
So what if we provide this library and someone uses it as a component in
some other app they write.
They likely have an expectation that it will continue to be supported
and that any security vulnerabilities in it are detected and fixed.
If we don't have a mechanism to remove (or at least very strongly
recommend to remove) package we no longer support, then we are leaving
users vulnerable.
The orphans system is fine, but it's certainly not as strong a mechanism
as I think is needed.
Col
--
Colin Guthrie
colin(at)mageia.org
<A HREF="http://colin.guthr.ie/">http://colin.guthr.ie/</A>
Day Job:
Tribalogic Limited <A HREF="http://www.tribalogic.net/">http://www.tribalogic.net/</A>
Open Source:
Mageia Contributor <A HREF="http://www.mageia.org/">http://www.mageia.org/</A>
PulseAudio Hacker <A HREF="http://www.pulseaudio.org/">http://www.pulseaudio.org/</A>
Trac Hacker <A HREF="http://trac.edgewall.org/">http://trac.edgewall.org/</A>
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="020730.html">[Mageia-dev] Package drop request: ruby-ParseTree
</A></li>
<LI>Next message: <A HREF="020735.html">[Mageia-dev] Package drop request: ruby-ParseTree
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#20732">[ date ]</a>
<a href="thread.html#20732">[ thread ]</a>
<a href="subject.html#20732">[ subject ]</a>
<a href="author.html#20732">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|