Re: New package: haiti-1.3.0

[noraj <noraj@users.noreply.github.com>]

[-- Attachment #1: Type: text/plain, Size: 2252 bytes --]

New comment by noraj on void-packages repository

https://github.com/void-linux/void-packages/pull/37804#issuecomment-1174734157

Comment:
> Sorry, but I only assume that because you wrote the tool and try to submit this tool to multiple distro.

The tool is from 2019 and have already spread. I'm not actually trying to ship it in more distro for fame or whatever but because I had feedback from users that they don't want to `gem install` on their distro so providing them a distro package is easier and more maintainable for them. That's all.

> Security tools are very welcomed in this distro. In facts, all tools which will be used by our users will be welcomed.
However, security tools should go under auditing before introduction. And tools should be introduced by users who will USE the tools ON Void Linux. I can see the former (as you wrote it) but not the latter (noone specifically asked for it).

That make sense.

> I think NO Void Linux users will use it. Evident: noone ever asked for it while `haiti` was release a stable release for more than 1 year, except you, who won't use Void Linux.

I know a least one Void user which use it but he is using the docker image or the distro package in an ArchLinux package because there is no Void package. Maybe there are more that are actually using a workaround and don't feel the need to request for it but would switch to void package if available. But again it make sens to me to not include it if it targets too few users. On ArchLinux there is an user repository (AUR) where people can vote for package, so eventually a dev can provide it's tool on the AUR and if it's a massive success and lot of people vote for it sometimes ArchLinux dev offers to include the tool in the official repo. Unfortunately there is no such a mechanism for Void.

> Maintaining a software also costs. Build and distribute are easy, since machine are cheap. Human cost is not.

For that I can maintain the Void package and bump / test it at each Haiti release, I put orphan because I thought it required the name of an official team member.

> I only know VUR because of your comments.

Yay, it seems very little know. Maybe you know another more popular void user repository alternative?