From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E1ECF139085 for ; Tue, 3 Jan 2017 17:10:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 68025E0D82; Tue, 3 Jan 2017 17:10:33 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id EE815E0D04 for ; Tue, 3 Jan 2017 17:10:32 +0000 (UTC) Received: from [IPv6:2001:470:e1cc:3::10] (unknown [IPv6:2001:470:e1cc:3::10]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: prometheanfire) by smtp.gentoo.org (Postfix) with ESMTPSA id CA4ED340EDA for ; Tue, 3 Jan 2017 17:10:31 +0000 (UTC) Subject: Re: Why lastrite when it works? (Was: Re: [gentoo-dev] Packages up for grabs due to retirement) References: <4a185773-6144-69b8-a466-0e554732f12f@gentoo.org> <3374938.6WoLSc5MN8@mal> <589f3521-af7e-488d-8bba-4465c3a78e8e@gmail.com> <7959202.qokhvJWHAx@mal> To: gentoo-dev@lists.gentoo.org From: Matthew Thode Message-ID: <6c83587d-0f76-2c0e-2153-d66074b272f1@gentoo.org> Date: Tue, 3 Jan 2017 11:10:25 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="KbOalgMGG9PC8q2uc2vBNhNDMQ3wG2FFe" X-Archives-Salt: d6b73e43-921d-4f57-92c2-58b07ee19c4a X-Archives-Hash: 41252e7c6c0d616922b9f534c27191fe This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KbOalgMGG9PC8q2uc2vBNhNDMQ3wG2FFe Content-Type: multipart/mixed; boundary="X8Qxa9AP5q1JrOh1NJdnGU3e9IAftmVE2" From: Matthew Thode Reply-To: prometheanfire@gentoo.org To: gentoo-dev@lists.gentoo.org Message-ID: <6c83587d-0f76-2c0e-2153-d66074b272f1@gentoo.org> Subject: Re: Why lastrite when it works? (Was: Re: [gentoo-dev] Packages up for grabs due to retirement) References: <4a185773-6144-69b8-a466-0e554732f12f@gentoo.org> <3374938.6WoLSc5MN8@mal> <589f3521-af7e-488d-8bba-4465c3a78e8e@gmail.com> <7959202.qokhvJWHAx@mal> In-Reply-To: --X8Qxa9AP5q1JrOh1NJdnGU3e9IAftmVE2 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/03/2017 09:10 AM, Kristian Fiskerstrand wrote: > On 01/03/2017 03:57 PM, Michael Mol wrote: >> For security's sake, even mature software needs, at minimum, routine a= uditing.=20 >> Unless someone's doing that work, the package should be considered for= =20 >> removal. (Call that reason # =CF=80, in honor of TeX.) >=20 > A distinction here likely needs to be made between actively maintained > upstream and actively Gentoo maintained as well. Actively maintained > upstream might not be an issue for a feature complete package, but if i= t > lacks a Gentoo-maintainer in addition it is worrying. >=20 Agreed, the main thing a package needs is a responsive packager. If the packager finds an issue with a package that they can't fix and upstream is non-responsive then the packager is probably responsible for tree-cleaning themselves. --=20 Matthew Thode (prometheanfire) --X8Qxa9AP5q1JrOh1NJdnGU3e9IAftmVE2-- --KbOalgMGG9PC8q2uc2vBNhNDMQ3wG2FFe Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYa9sBAAoJEGSje+quGaToSZgQANICFZ1nfCa3O4Ws05oFKIgc TOZZdvJicZ5aDy0atFWlTGzFYThZHXDrG1B0dLrjQGgCFNu9KYwfTvhca/xVdVQy ZXuiE6A6zVDZ0Rjr6AdpYzCSq1AGhQjX9GdQzKweyjz0D/mR3H+l0Xdjp+qYWcku S0GKwOYFnszu6M3X79bYj1v9MOP/kKoaJv8vTrpqhetVk5+fhSIPOY5tmTZZa0ua 4f3OQyqLdD9nKr0/ND8/dYUSKH3Jt+g/UDeUot8z3K46xkmyaxzB0/yXh+sYF/Ou iHRwd8YpYSX3z3VFjoXURP50tIKACUxBnrTr65Z62/5qrVX45zU5MO58vJFjK6rd BnWRzzo546EE2wifbcWWklBKP4twkDsC702MkA4iVIw4Xy/9BOw1hVhoF8B8HlnE JfG7uYpGtRzXq/+w7i8rPHp7XHpq49/Y+jFQ4SKbYelx8nFyX7QgKhNHR8Ww6S+s xVYBnT5umSS9RVLD4L01tVTjqgDBDagkze6q+Um9+6/J2MBb/lZK4nm54GmlivYS SyQAn6fb+2Dr43vluAg98zfNabM3/VGjKYDaPgV1Hzo3zn3GcmV2lXHqjug1fdBM gpMVFP7cSswJsaYHEFHCGv5KSIgDy6+DIGdZD6RSn5GA3EP1Lxg9iZkqgCOXiwv2 VZ0Ji6dZxRXlJkmDxFBM =Txmk -----END PGP SIGNATURE----- --KbOalgMGG9PC8q2uc2vBNhNDMQ3wG2FFe--