Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove lowercase-C "cabal" package #773

Closed
tom-bop opened this issue Jul 6, 2018 · 1 comment
Closed

Remove lowercase-C "cabal" package #773

tom-bop opened this issue Jul 6, 2018 · 1 comment

Comments

@tom-bop
Copy link

tom-bop commented Jul 6, 2018

Now that #761 has been closed (so a malicious user couldn't re-upload a "cabal" package), and https://github.com/haskell/cabal/4778 has been merged (So the users of newer versions of cabal-install will get a nice message: "There is no package named 'cabal'. However, the following package name exists: 'Cabal'."), should we remove this package from Hackage?:

https://hackage.haskell.org/package/cabal

cc @cartazio

@hvr
Copy link
Member

hvr commented Jul 9, 2018

Well, hard removal of packages from the primary index is a very disruptive operation for several technical reasons; there's been some discussion I can't find right now about variants for implementing support for entry-removal in hackage-security, but that's evidently not been tackled yet.

Moreover, there's plans to restructure things and finally fix the wart that exe:cabal ought to be installable via cabal install cabal (see haskell/cabal#3965) and I intend to finally move forward with that as it looks like the targetted cabal 3.0 milestone is probably going to be released end of 2018. At that point, we'd end up with a lower-case cabal package index entry anyway; so there's little benefit to remove the cabal entry now only to re-add it back later again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants