> On Mon, 22 Feb 2010 16:26:51 -0800, Michael G Schwern
> said:
> Adam Kennedy wrote:
>> You should not add MYMETA.yml to the MANIFEST, it will NEVER ship to CPAN.
>>
>> Remove the signature test.
> ...because its redundant, complicates testing, has little security
> value and
Eric Wilhelm wrote:
# from David Golden
# on Monday 22 February 2010 20:26:
But I'm curious about how the automatic addition of MYMETA.yml to
MANIFEST.SKIP (as shown in the output) didn't keep you from running
into this. (I'm mostly concerned about whether it might cause
problems for more vali
# from David Golden
# on Monday 22 February 2010 20:26:
>>> But I'm curious about how the automatic addition of MYMETA.yml to
>>> MANIFEST.SKIP (as shown in the output) didn't keep you from running
>>> into this. (I'm mostly concerned about whether it might cause
>>> problems for more valid use-c
On Mon, Feb 22, 2010 at 10:36 PM, Michael G Schwern wrote:
> Eric Wilhelm wrote:
>>>
>>> $master:~/cpan/perlids>./Build disttest
>>> Creating Makefile.PL
>>> Creating META.yml
>>> *File 'MANIFEST.SKIP' does not include 'MYMETA.yml'. Adding it now.*
>>> ...
>>> *t/00-signature.t . Not in MANIFE
Eric Wilhelm wrote:
$master:~/cpan/perlids>./Build disttest
Creating Makefile.PL
Creating META.yml
*File 'MANIFEST.SKIP' does not include 'MYMETA.yml'. Adding it now.*
...
*t/00-signature.t . Not in MANIFEST: MYMETA.yml
==> MISMATCHED content between MANIFEST and distribution files! <==*
I
# from Hinnerk Altenburg
# on Monday 22 February 2010 06:29:
> $master:~/cpan/perlids>./Build disttest
> Creating Makefile.PL
> Creating META.yml
> *File 'MANIFEST.SKIP' does not include 'MYMETA.yml'. Adding it now.*
>...
> *t/00-signature.t . Not in MANIFEST: MYMETA.yml
> ==> MISMATCHED conte
Adam Kennedy wrote:
You should not add MYMETA.yml to the MANIFEST, it will NEVER ship to CPAN.
Remove the signature test.
...because its redundant, complicates testing, has little security value and
provides a false sense of security.
If a 3rd party has hijacked the tarball they can simply
You should not add MYMETA.yml to the MANIFEST, it will NEVER ship to CPAN.
Remove the signature test.
Adam K
On 23 February 2010 01:29, Hinnerk Altenburg wrote:
> Hi,
>
> I got problems with the MYMETA.yml and the recommended signature test from
> http://github.com/audreyt/module-signature/blob
Hi,
I got problems with the MYMETA.yml and the recommended signature test from
http://github.com/audreyt/module-signature/blob/master/t/0-signature.t:
$master:~/cpan/perlids>perl ./Build.PL
> *Creating new 'MYMETA.yml' with configuration results*
> Creating new 'Build' script for 'CGI-IDS' versio
