2008/10/1 Andreas J. Koenig <[EMAIL PROTECTED]>: >>>>>> On Tue, 30 Sep 2008 17:11:00 -0500, Jonathan Rockway <[EMAIL PROTECTED]> >>>>>> said: > > >> Anyway, I think the average CPAN author doesn't > >> really know or care about that, sadly. > >> See also > > > FWIW, this is true. I have never thought about it. > > > Personally, I am confused as to why users have programs that do whatever > > an input file from the Internet tells them to do. If you don't want > > your tar command to create world-writable files, you should probably > > tell your tar command to not create world-writable files... right? That > > is much easier than convincing every person on the Internet to do what > > you want. It is also easier than convincing every CPAN author to > > upgrade MakeMaker. > > Not true. The tools we are advocating must simply work. If they would > leave all decisions to the end user we would have no CPAN. MakeMaker > has always done the right thing, no need to upgrade. There was a bug > to squash and not to paint over it or bathe in ignorance. Did you even > notice the bug in the noise?
<rant> I rather strongly object to this change. I just uploaded ExtUtils-Install 1.51, and was rudely told it would not be indexed. I then spent 15 minutes trying to figure out what win32 permissions would allow me to create a tarball that would pass this silly test. What really gets me going tho is I WASNT TOLD THIS ABOUT 1.51_01 or 1.51_02 or 1.51_03 or (do you detect a pattern here?) 1.51_04 or 1.51_05, all of which i uploaded in the last few days in the exact same way!!! IMO if the toolchain is to work this should happen at PAUSE (if it can detect this problem IMO it should just damn well fix it itself) or at extraction. It shouldn't be my problem how you nixy people (and I'm one these days myself) want your files permissioned when they are installed, especially if those permissions don't make sense on my box (of the moment) anyway. And at the very least I should find out about this when I upload a dev release and not be surprised when I make a production release. Whats going to happen next, stuff rejected because they don't have *nix line endings? Or *nix style shebangs? Or use perl-qa's preferred indentation style or something? Hmmmm?! /grrrr </rant> ps: Andreas, don't take this personally I'm just letting off steam and I still think you are a really nice guy and do a fantastic job with PAUSE. :-) -- perl -Mre=debug -e "/just|another|perl|hacker/"
