From mboxrd@z Thu Jan 1 00:00:00 1970 Received: (from majordomo@localhost) by pauillac.inria.fr (8.7.6/8.7.3) id JAA03400; Sat, 1 Mar 2003 09:14:15 +0100 (MET) X-Authentication-Warning: pauillac.inria.fr: majordomo set sender to owner-caml-list@pauillac.inria.fr using -f Received: from nez-perce.inria.fr (nez-perce.inria.fr [192.93.2.78]) by pauillac.inria.fr (8.7.6/8.7.3) with ESMTP id JAA03426 for ; Sat, 1 Mar 2003 09:14:14 +0100 (MET) Received: from orcaware.com (bdsl.66.12.233.174.gte.net [66.12.233.174]) by nez-perce.inria.fr (8.11.1/8.11.1) with ESMTP id h218ECH05508 for ; Sat, 1 Mar 2003 09:14:12 +0100 (MET) Received: from orcaware.com (localhost.localdomain [127.0.0.1]) by orcaware.com (8.12.7/8.12.7) with ESMTP id h218D9YG008950; Sat, 1 Mar 2003 00:13:09 -0800 Message-ID: <3E606BE2.C6AD005B@orcaware.com> Date: Sat, 01 Mar 2003 00:14:26 -0800 From: Blair Zajac X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U) X-Accept-Language: en,x-ns1rfacHe4WNh5,x-ns2U100btwUq5f MIME-Version: 1.0 To: Jacques Garrigue CC: roberto@dicosmo.org, caml-list@inria.fr Subject: Re: [Caml-list] Alternative proposal: COAN References: <02103BF1-4835-11D7-B97A-000A95773ED2@rouaix.org> <15963.19322.759255.37091@gargle.gargle.HOWL> <20030228182016D.garrigue@kurims.kyoto-u.ac.jp> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-caml-list@pauillac.inria.fr Precedence: bulk Jacques Garrigue wrote: > > * For me the central repository should not contain the source themselves. > This was an error with the CDK: the distribution becomes huge, and > it is very difficult for the maintainers to track changes > by developpers (who do not necessarily want to work in that > repository, for evident practical reasons). Not speaking of > licensing problems. I see two different points here. One being the huge CDK distribution, which could have been broken up into individual .tar.gz's to handle dependency tracking. This is distinct from the central repository not containing sources themselves, which I disagree with for several reasons. 1) Authors moving, redesigning web sites, etc. Each move or redesign would have require module authors to go to the central repository to update links. If the author has a lot of modules, this may be time consuming. 2) I think for security purposes, it would be good to have validated, md5sum'ed and potentially signed sources on a central site. I would worry if I just automatically download some package from somebody's own web site. I'm trusting the security on everybody's system, not just one. 3) Archive of old versions. Authors may delete or clean up their own older versions of modules. The central repository could keep all old copies which may be useful for some people. As a CPAN author, when I put a package up on CPAN, I don't have to worry about it any more. That's a nice feeling to have. I've moved my web site 3 times in the last several years and updating links in a repository would have been additional unnecessary work. Best, Blair -- Blair Zajac Plots of your system's performance - http://www.orcaware.com/orca/ ------------------- To unsubscribe, mail caml-list-request@inria.fr Archives: http://caml.inria.fr Bug reports: http://caml.inria.fr/bin/caml-bugs FAQ: http://caml.inria.fr/FAQ/ Beginner's list: http://groups.yahoo.com/group/ocaml_beginners