[Haskell-cafe] Cabal dependency hell

[Daniel Fischer]

Am Sonntag 11 April 2010 18:43:30 schrieb Maciej Piechotka:
> >       * Build reporting in the hackage server
> >         The idea here is that cabal sends back anonymous reports to
> > the server to say if a package compiled or not, and against what
> > versions of dependencies. This would make it clearer to maintainers if
> > their dependency versions are correct. Additionally I think it would
> > be useful for hackage to provide tweaked .cabal files for packages
> > with updated constraints, even without new version uploads.
> >         We are proposing a GSoC project which would cover some of
> > this.
>
> Hmm. I guess there are 2 problems:
>
>  - Privacy problem. I don't want the software to call home with data
> without asking.

I think in the default cabal config, build-reporting would be turned off 
and you'd have to turn it on yourself. Turning it on by default wouldn't be 
sensible.

>  - Spoofing problem. Someone can feed wrong data easily without chance
> of being discovered (for example to prove how grate 'haxor' he is).
>
>
> Regards