Hi Eduardo,

Well, this is a reaaaally late response, so feel free to just ignore
me :)

On Thu, 2014-04-03 at 13:39 -0600, Eduardo Silva wrote:

> A common scenario is the following: a developer will use MySQL as a
> backend for his application, we already have a MySQL package but it
> also comes with a built-in dependency. We want a mechanism to let the
> developer to install it dependency in a clean way. 
> 
> 
> Known tools are npm (Node Package Manager), Gem (for Ruby stuff), PIP
> and others for python, etc. 
> 
> 
> We also have Duda Client Manager, which is the right fit for the
> solution, but i would like to hear from you comments and suggestions
> based in your experience as a developer.
> 
> 
> comments ?
First of all, it sounds really useful to me. Now, having said that, I
think a package system is a problem in its own, Monkey putting efforts
to build something like this sounds too ambitious.

Emacs has a package system called ELPA (Emacs Lisp Package Archive),
there is a really looong, but interesting thread about (lack of)
security in it[0], I recommend you to get some popcorn and beer to read
it.

The first email of the thread recommends two readings[1][2], I  read
them and they definitely worth the time, because they educate in all the
tiny details that a package manager has to deal with.

_Maybe_ , we could cook an ugly hack to make python packages (eggs) that
contain C source code, python (pip/easy_install/setuptools) already
solved the problem of compiling and distributing Python/C sources, I've
read somebody used python eggs to distribute C# code.

Best Regards,

[0] http://thread.gmane.org/gmane.emacs.devel/155400
[1] http://isis.poly.edu/~jcappos/papers/cappos_pmsec_tr08-02.pdf
[2] https://www.cs.arizona.edu/stork/packagemanagersecurity/

-- 
Felipe Reyes <[email protected]>


_______________________________________________
Monkey mailing list
[email protected]
http://lists.monkey-project.com/listinfo/monkey

Reply via email to