Knud Soerensen, el 11 de noviembre a las 11:55 me escribiste:
> Leandro Lucarella wrote:
> >Knud Soerensen, el 11 de noviembre a las 04:57 me escribiste:
> >>Walter Bright wrote:
> >>>http://www.reddit.com/r/programming/comments/a2nfz/guido_people_want_cpan/
> >>>
> >>>http://search.cpan.org/
> >>>
> >>>Over and over, I hear that CPAN is one of the great reasons people use Java. Such for D would be a tremendous boost to the D community.
> >>What about have the D compiler check online if it can't find a module on the local computer.
> >>
> >>ex.
> >>import foo.bar;
> >>
> >>would first check locally for foo/bar.d and the try online at
> >>
> >>http://www.digitalmars.com/d/modules/foo/bar.d
> >>or something like that.
> >
> >You are not much of a security guy, are you? ;)
> >
> 
> No, I mostly chose freedom over security ;-)
> 
> How does CPAN solve the security problem ?
> 
> I doesn't suggest that any url can be used in import,
> I suggest that it look on a specific trused server
> http://www.digitalmars.com/d/modules/ or something similar.

Change the /etc/hosts and bang! Even more, digital mars website can be cracked. If you add SSL authentication to the mix, maybe we can start talking about something.

But I will be very odd to make import download *anything*.

-- 
Leandro Lucarella (AKA luca)                     http://llucax.com.ar/
----------------------------------------------------------------------
GPG Key: 5F5A8D05 (F8CD F9A7 BF00 5431 4145  104C 949E BFB6 5F5A 8D05)
----------------------------------------------------------------------
Aprendan de la primavera, que antecede al verano, precede al inverno y
no lo anda diciendo por ahí.
	-- Ricardo Vaporeso. Llanos de Luzuriaga, 1914.

Lutger wrote:
> 
> I agree very much, DSSS has so much potential it's not funny. If I wouldn't be too stuffed with work as is, I might attempt to fix it myself. Hopefully somebody steps in.

I've hacked on it a bit, but nothing major and never finished the job. I think I was seeking to add support for multiple compiler/library versions/setups without the need to have multiple DSSS installations and file trees.

I agree about the great potential as well.  I'd actually like to see it borrow a bunch of good ideas from Gentoo's portage, since portage has been a very solid package manager for me.  Of course, there is some stuff portage does though that is out of DSSS's scope, and some stuff that DSSS does that is out of portage's scope .

In particular, concepts like use flags and different levels of release stability would be nice things to have.

"Leandro Lucarella" <llucax@gmail.com> wrote in message news:20091111221420.GA28195@llucax.com.ar...
> Knud Soerensen, el 11 de noviembre a las 11:55 me escribiste:
>> Leandro Lucarella wrote:
>> >Knud Soerensen, el 11 de noviembre a las 04:57 me escribiste:
>> >>Walter Bright wrote:
>> >>>http://www.reddit.com/r/programming/comments/a2nfz/guido_people_want_cpan/
>> >>>
>> >>>http://search.cpan.org/
>> >>>
>> >>>Over and over, I hear that CPAN is one of the great reasons people use Java. Such for D would be a tremendous boost to the D community.
>> >>What about have the D compiler check online if it can't find a module on the local computer.
>> >>
>> >>ex.
>> >>import foo.bar;
>> >>
>> >>would first check locally for foo/bar.d and the try online at
>> >>
>> >>http://www.digitalmars.com/d/modules/foo/bar.d
>> >>or something like that.
>> >
>> >You are not much of a security guy, are you? ;)
>> >
>>
>> No, I mostly chose freedom over security ;-)
>>
>> How does CPAN solve the security problem ?
>>
>> I doesn't suggest that any url can be used in import,
>> I suggest that it look on a specific trused server
>> http://www.digitalmars.com/d/modules/ or something similar.
>
> Change the /etc/hosts and bang! Even more, digital mars website can be cracked. If you add SSL authentication to the mix, maybe we can start talking about something.
>
> But I will be very odd to make import download *anything*.
>

It's an interesting idea, but, if one of my imports fails, 99.9+% of the time it's because I either typed the wrong thing or didn't give DMD the (correct) location. It's rarely, if ever, because I didn't download it. Plus then there's the question of versions. It's interesting, but doesn't seem all that useful, even with security issues aside.