svn commit: r422505 - head/archivers/snappy-java

John Marino freebsd.contact at marino.st
Wed Sep 21 20:54:06 UTC 2016


On 9/21/2016 15:37, Steve Wills wrote:
> Hi,
>
> On 09/21/2016 15:11, Tijl Coosemans wrote:
>> I would say using Fedora's cache is leeching and not very nice.
>
> I have to agree. And it is a cache. It's neither an upstream nor a
> mirror of upstream or even something like LOCAL. Yes, we have the SHA
> sums to help protect us from potential security issues and yes it's nice
> to "just fix it". But the MASTER_SITES are used by other things such as
> portscout, so just picking a random location isn't ideal.
>
> What really needs to be done is to find proper upstreams if they exist
> and use them or deprecate the ports if not. Look at the python ones for
> example, they're easily found in pypi. Can't we please do that?

There are ports that have been using fedora and similar repositories for 
years now and they've been reliable (I am not aware of any of these 
where the MASTER_SITE went away).

Originally it was implied that fedora/ubuntu isn't reliable, but they are.

Now the concept of leeching has been introduced.  There's a point there, 
but it's got to be a drop in the bucket.

It's supposed to be a provisional fix and anybody with commit privilege 
(including the maintainer if defined) is free to fix it.

I didn't pull fedora/ubuntu as the first resort, I searched first.  If 
they had upstreams, they wouldn't have been on GOOGLE CODE in the first 
place.  But Steve, you are fully free to look for upstreams.  I'm not 
stopping you.  Also, don't forget I was looking for EXACT versions.  It 
was not my intent to UPGRADE the port.  I didn't have time to test new 
versions, I needed matching hashes.  There are new upstreams with new 
versions though, so I also invite you and everyone else to update the 
ports in question.

How many are we talking about anyway?  Like less than 20?  Out of 400? 
a lot of inflated mole hills are going around here, yet again.

John




---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus



More information about the svn-ports-head mailing list