On Monday 30 October 2006 18:16, David Golden wrote:
> Bundle gives the option of either freezing a particular version (by
> specifying a distribution file) or else fully upgrading to the
> absolute latest version (by specifying a module).

The problem I've experienced with this method is that authors tend to delete 
their modules from the CPAN (at the strong urging of messages on the PAUSE 
website).  This leads to broken bundles (or ports in my case), which is 
mildly irritating.  However, adding logic to get the files from the backpan 
would eliminate this problem.  (But then there's the bandwidth issue -- do we 
really want automatic tools hitting the backpan?)

The other issue is of security updates.  I would hate to lock people into 
insecure versions of modules.  Maybe there needs to be (another :) flag that 
says "don't distribute this version anymore, use x.y.(z+1) instead".  
Problems like this might be too late for the 5pan to solve, though.  (I'm not 
sure I like any of the 6pan proposals, though, so fixing the current CPAN is 
not necessarily a bad idea or a waste of time.)

Regards,
Jonathan Rockway

-- 
package JAPH;use Catalyst qw/-Debug/;($;=JAPH)->config(name => do {
$,.=reverse qw[Jonathan tsu rehton lre rekca Rockway][$_].[split //,
";$;"]->[$_].q; ;for 1..4;$,=~s;^.;;;$,});$;->setup;

Attachment: pgp4pMn9HLdEV.pgp
Description: PGP signature

Reply via email to