[Haskell-cafe] Ticking time bomb

Joachim Breitner nomeata at debian.org
Wed Jan 30 23:57:28 CET 2013


Am Mittwoch, den 30.01.2013, 14:43 -0800 schrieb Edward Z. Yang:
> Excerpts from Joachim Breitner's message of Wed Jan 30 12:59:48 -0800 2013:
> > another reason why Cabal is no package manager¹.
> Based on the linked post, it seems that you are arguing that cabal-install is
> not a package manager, and thus it is not necessary for it to duplicate
> the work that real package managers e.g. Debian or Ubuntu put into
> vetting, signing and releasing software.  (Though I am not sure, so please
> correct me if I am wrong.)

I’m not against cryptographically signed packages on hackage. In fact, I
would whole-heatedly appreciate it, as it would make my work as a
package maintainer easier.

I was taking the opportunity to point out an advantage of established
package management systems, to shamelessly advertise my work there, as
not everyone sees distro-packaged libraries as a useful thing.


Joachim "nomeata" Breitner
Debian Developer
  nomeata at debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C
  JID: nomeata at joachim-breitner.de | http://people.debian.org/~nomeata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://www.haskell.org/pipermail/haskell-cafe/attachments/20130130/28a7a21d/attachment.pgp>

More information about the Haskell-Cafe mailing list