Re: New package: haiti-1.3.0

[sgn <sgn@users.noreply.github.com>]

[-- Attachment #1: Type: text/plain, Size: 2996 bytes --]

New comment by sgn on void-packages repository

https://github.com/void-linux/void-packages/pull/37804#issuecomment-1174883458

Comment:
> > Sorry, but I only assume that because you wrote the tool and try to submit this tool to multiple distro.
> 
> The tool is from 2019 and have already spread.

In `haiti` repository, I only see BlackArch, and FreeBSD ports, also AUR (which, I think, everyone can submit) and Gentoo overlay.
So, I'm not sure how you define "spread".
This isn't a confrontation. It's just my observation.

> I'm not actually trying to ship it in more distro for fame or whatever but because I had feedback from users that they don't want to `gem install` on their distro so providing them a distro package is easier and more maintainable for them. That's all.

Citation requested, please.

> 
> > Security tools are very welcomed in this distro. In facts, all tools which will be used by our users will be welcomed.
> > However, security tools should go under auditing before introduction. And tools should be introduced by users who will USE the tools ON Void Linux. I can see the former (as you wrote it) but not the latter (noone specifically asked for it).
> 
> That make sense.
> 
> > I think NO Void Linux users will use it. Evident: noone ever asked for it while `haiti` was release a stable release for more than 1 year, except you, who won't use Void Linux.
> 
> I know a least one Void user which use it but he is using the docker image or the distro package in an ArchLinux package because there is no Void package. Maybe there are more that are actually using a workaround and don't feel the need to request for it but would switch to void package if available.

Citation requested, again.

> But again it make sens to me to not include it if it targets too few users. 

No, it's fine to be used by a few users, (you're not using Void Linux, so I don't think you're counted).

> On ArchLinux there is an user repository (AUR) where people can vote for package, so eventually a dev can provide it's tool on the AUR and if it's a massive success and lot of people vote for it sometimes ArchLinux dev offers to include the tool in the official repo. Unfortunately there is no such a mechanism for Void.

Users can request to package it. See https://github.com/void-linux/void-packages/issues?q=is%3Aissue+is%3Aopen+label%3Arequest for current requests.

> 
> > Maintaining a software also costs. Build and distribute are easy, since machine are cheap. Human cost is not.
> 
> For that I can maintain the Void package and bump / test it at each Haiti release, I put orphan because I thought it required the name of an official team member.

Maintaining a distro isn't simply bump version of a package, but also integrate with other parts of system.

> 
> > I only know VUR because of your comments.
> 
> Yay, it seems very little know. Maybe you know another more popular void user repository alternative?

No, I don't