Re: [R-pkg-devel] Possible malware(?) in a vignette

2024-01-25 Thread Simon Urbanek
Iñaki, I think you got it backwards in your conclusions: CRAN has not generated that PDF file (and Windows machines are not even involved here), it is the contents of a contributed package, so CRAN itself is not compromised. Also it is far from clear that it is really a malware - in fact it's

Re: [R-pkg-devel] new maintainer for CRAN package XML

2024-01-25 Thread Henrik Bengtsson
Some thoughts for what the next steps could be: I could be wrong, but I doubt that there's someone out there that wants to pick up 'XML' and start developing it beyond keeping the lights on. I also think the community agrees that 'xml2' is the recommended package to use for XML-related needs.

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Berwin A Turlach
On Thu, 25 Jan 2024 09:44:26 -0800 Henrik Bengtsson wrote: > On Thu, Jan 25, 2024 at 9:23 AM Berwin A Turlach > wrote: > > > > G'day Duncon, Uups, apologies for the misspelling of your name Duncan. Fingers were too fast. :) [...] > > But you could always code your example (not tested :-) )

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Henrik Bengtsson
On Thu, Jan 25, 2024 at 9:23 AM Berwin A Turlach wrote: > > G'day Duncon, > > On Thu, 25 Jan 2024 11:27:50 -0500 > Duncan Murdoch wrote: > > > On 25/01/2024 11:18 a.m., Henrik Bengtsson wrote: > [...] > > I think you're right that syntax errors in help page examples will be > > installable, but

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Henrik Bengtsson
On Thu, Jan 25, 2024 at 8:27 AM Duncan Murdoch wrote: > > On 25/01/2024 11:18 a.m., Henrik Bengtsson wrote: > > On Thu, Jan 25, 2024 at 7:48 AM Duncan Murdoch > > wrote: > >> > >> On 25/01/2024 10:27 a.m., Josiah Parry wrote: > >>> Hey all, > >>> > >>> I've encountered use of the native pipe

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Berwin A Turlach
G'day Duncon, On Thu, 25 Jan 2024 11:27:50 -0500 Duncan Murdoch wrote: > On 25/01/2024 11:18 a.m., Henrik Bengtsson wrote: [...] > I think you're right that syntax errors in help page examples will be > installable, but I don't think there's a way to make them pass "R CMD > check" other than

Re: [R-pkg-devel] new maintainer for CRAN package XML

2024-01-25 Thread Heather Turner
Re: guidance on how to migrate from XML to xml2, these notes from Daniel Nüst may be helpful: https://gist.github.com/nuest/3ed3b0057713eb4f4d75d11bb62f2d66. Best wishes, Heather On Wed, Jan 24, 2024, at 3:38 PM, Emmanuel Blondel wrote: > if XML is deprecated, then what would be the choice for

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Duncan Murdoch
On 25/01/2024 11:44 a.m., Josiah Parry wrote: The package of course passes R CMD check otherwise it wouldn’t be on CRAN! (: CRAN doesn't run checks using R 3.6.0. The package claims it works there, and maybe it will, but it won't pass R CMD check. Duncan Murdoch Thank you Henrik! Good

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Josiah Parry
The package of course passes R CMD check otherwise it wouldn’t be on CRAN! (: Thank you Henrik! Good to know my intuition was correct. I’m glad we can start to use the new features of R in package documentation :) On Thu, Jan 25, 2024 at 11:27 Duncan Murdoch wrote: > On 25/01/2024 11:18 a.m.,

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Duncan Murdoch
On 25/01/2024 11:18 a.m., Henrik Bengtsson wrote: On Thu, Jan 25, 2024 at 7:48 AM Duncan Murdoch wrote: On 25/01/2024 10:27 a.m., Josiah Parry wrote: Hey all, I've encountered use of the native pipe operator in the examples for 'httr2' e.g. request("http://example.com;) |> req_dry_run()

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Henrik Bengtsson
On Thu, Jan 25, 2024 at 7:48 AM Duncan Murdoch wrote: > > On 25/01/2024 10:27 a.m., Josiah Parry wrote: > > Hey all, > > > > I've encountered use of the native pipe operator in the examples for > > 'httr2' e.g. > > > > request("http://example.com;) |> req_dry_run() > > > > > > Since r-oldrel

Re: [R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Duncan Murdoch
On 25/01/2024 10:27 a.m., Josiah Parry wrote: Hey all, I've encountered use of the native pipe operator in the examples for 'httr2' e.g. request("http://example.com;) |> req_dry_run() Since r-oldrel (according to rversions::r_oldrel()) is now 4.2.3, can the native pipe be used in example

[R-pkg-devel] Native pipe in package examples

2024-01-25 Thread Josiah Parry
Hey all, I've encountered use of the native pipe operator in the examples for 'httr2' e.g. request("http://example.com;) |> req_dry_run() Since r-oldrel (according to rversions::r_oldrel()) is now 4.2.3, can the native pipe be used in example code? I do notice that the package httr2 requires

Re: [R-pkg-devel] New Package Removal because Shared Library Too Large from Debugging Symbols

2024-01-25 Thread Johann Gaebler
It seems some of my emails didn’t make it onto the list, so I just wanted briefly to follow up to say thank you to Dirk, Ivan, Uwe, and Ben for helping with this. Ultimately, following Ivan’s advice, I just added a GitHub action to the repo as a temporary patch to ensure that the signature

Re: [R-pkg-devel] Possible malware(?) in a vignette

2024-01-25 Thread Robert M. Flight
I decided to grab a copy of that PDF from the RStudio CRAN mirror, and downloaded on Linux (where hopefully it won't be an issue) from the list of vignettes. Virus Total gives it the same hash as the above linked PDF, so it's definitely been propagated from CRAN, and *may* be malicious. That is

Re: [R-pkg-devel] Possible malware(?) in a vignette

2024-01-25 Thread Iñaki Ucar
On Thu, 25 Jan 2024 at 10:13, Colin Gillespie wrote: > > Hi All, > > I've had two emails from users in the last 24 hours about malware > around one of my vignettes. A snippet from the last user is: > > --- > I was trying to install a R package that depends on PowerRLaw two > weeks ago. However

[R-pkg-devel] Possible malware(?) in a vignette

2024-01-25 Thread Colin Gillespie
Hi All, I've had two emails from users in the last 24 hours about malware around one of my vignettes. A snippet from the last user is: --- I was trying to install a R package that depends on PowerRLaw two weeks ago. However my virus protection software F secure did not allow me to install it