Perl 6 - the future is here, just unevenly distributed

IRC log for #metacpan, 2016-11-03

| Channels | #metacpan index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
07:26 nakiro joined #metacpan
07:33 nakiro joined #metacpan
07:50 neilb joined #metacpan
08:19 neilb_ joined #metacpan
08:39 oiami joined #metacpan
08:59 neilb joined #metacpan
09:02 b_jonas left #metacpan
09:11 Relequestual joined #metacpan
09:31 neilb joined #metacpan
09:40 neilb joined #metacpan
09:47 osfabibisi joined #metacpan
10:08 nakiro joined #metacpan
10:16 nakiro joined #metacpan
11:33 nakiro joined #metacpan
12:12 Relequestual joined #metacpan
12:33 oiami1 joined #metacpan
15:14 neilb joined #metacpan
18:56 neilb joined #metacpan
19:35 Grinnz should something be done about this? https://paste.fedoraproject.org/469805/78201708/
19:36 Grinnz (the dist it finds: https://metacpan.org/release/GSAR/PerlInterp-0.02)
19:38 Grinnz there's no PAUSE-indexed module named perl or Perl
19:44 ether cpanm really shouldn't be falling back to metacpan searches when there's *nothing* in the index.
19:44 ether the metacpan search should only be used for looking for a trial release that is later than what PAUSE has indexed, for --dev.
19:45 ether as it is now, I would consider this an attack vector for getting code to run on a target machine
19:46 ether IMO, if I don't use the --dev option, I only want to install things in the index and nothing more
19:51 oalders I thought you could use MetaCPAN as your primary search source for cpanm or do I have that wrong?
19:51 trs cpanm is _supposed_ to be restricting to authorized and indexed modules.
19:52 oalders Yeah, may want to check what the query is actually doing.
19:53 trs Welp, that GSAR/PerlInterp-0.02 is marked as authorized in MetaCPAN's index.
19:54 trs https://api.metacpan.org/v0/release/GSAR/PerlInterp-0.02
19:55 oalders v1 likes it too https://fastapi.metacpan.org/v1/release/GSAR/PerlInterp-0.02
20:00 trs 06perms contains three entries for the "Perl" package: RJBS (first-come), GSAR (co-maint), and BMORROW (co-maint)
20:01 trs So it's not indexed, but its authorized.
20:01 trs (by PAUSE)
20:01 haarg apparently cpanm doesn't limit by latest.  the api shows the module Perl in that dist as indexed and authorized.
20:02 mst perhaps there's nothing in pause because a later dist was deleted from cpan
20:02 trs yeah, the file is indexed in metacpan: https://api.metacpan.org/v0/file/GSAR/PerlInterp-0.02/Perl.pm
20:03 trs haarg: it can't limit by latest because it also tries to satisfy version requirements
20:03 trs so it could limit to status: latest if no version reqs exist
20:31 Grinnz mst: yeah, there were later releases which are now on backpan
20:47 neilb_ joined #metacpan
21:18 grantm joined #metacpan
21:35 trs So the parity failure here is that authorized + indexed in the MetaCPAN sense isn't equivalent to "in 02packages" because PAUSE (as we know) doesn't automatically reindex the next highest release when you delete a release.
21:37 trs cpanm might be able to fix that by restricting to status = latest on MetaCPAN if there's no version restrictions requested.
23:17 jnbek joined #metacpan

| Channels | #metacpan index | Today | | Search | Google Search | Plain-Text | summary