Package: libwww-mechanize-perl Version: 2.16-1 Severity: wishlist User: ubuntu-de...@lists.ubuntu.com Usertags: origin-ubuntu mantic
Dear maintainers, The libwww-perl package has recently switched from depending on libhttp-cookies-perl, to depending on libhttp-cookiejar-perl, with the upstream rationale that this is "a safer cookie jar". Are there any plans for libwww-mechanize-perl to also switch? Downstream in Ubuntu, we libwww-perl, libwww-mechanize-perl, and libhttp-cookies-perl are all in the "main" component of the archive with different security committments than "universe" and we have a preference for not having duplicate implementations of functionality where we can avoid it; therefore we would prefer to replace libhttp-cookies-perl with libhttp-cookiejar-perl in main by having both of the reverse-dependencies updated to use the same implementation, rather than having both in main. I also see that libwww-mechanize-perl itself depends on libwww-perl, so I wonder what the interactions are like there if the two libraries are using separate cookie stores? Thanks, -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer https://www.debian.org/ slanga...@ubuntu.com vor...@debian.org
signature.asc
Description: PGP signature
