From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: "Drew Adams" Newsgroups: gmane.emacs.devel Subject: RE: ELPA security Date: Mon, 31 Dec 2012 11:57:58 -0800 Message-ID: <34F1279605B9404B9406960CDCF554FC@us.oracle.com> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com><87623i5tld.fsf@lifelogs.com> <87ehi6j943.fsf@fleche.redhat.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1356983904 13358 80.91.229.3 (31 Dec 2012 19:58:24 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 31 Dec 2012 19:58:24 +0000 (UTC) To: "'Tom Tromey'" , Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Dec 31 20:58:40 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1TplVM-0002ma-K7 for ged-emacs-devel@m.gmane.org; Mon, 31 Dec 2012 20:58:36 +0100 Original-Received: from localhost ([::1]:53808 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TplV7-0007Zf-Rh for ged-emacs-devel@m.gmane.org; Mon, 31 Dec 2012 14:58:21 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:56582) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TplV5-0007ZN-F0 for emacs-devel@gnu.org; Mon, 31 Dec 2012 14:58:20 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TplV1-00006W-7V for emacs-devel@gnu.org; Mon, 31 Dec 2012 14:58:19 -0500 Original-Received: from aserp1040.oracle.com ([141.146.126.69]:47462) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TplV0-00006K-Ux for emacs-devel@gnu.org; Mon, 31 Dec 2012 14:58:15 -0500 Original-Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id qBVJwB6w011861 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 31 Dec 2012 19:58:14 GMT Original-Received: from acsmt356.oracle.com (acsmt356.oracle.com [141.146.40.156]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id qBVJwATq008799 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 31 Dec 2012 19:58:11 GMT Original-Received: from abhmt118.oracle.com (abhmt118.oracle.com [141.146.116.70]) by acsmt356.oracle.com (8.12.11.20060308/8.12.11) with ESMTP id qBVJwAB8014463; Mon, 31 Dec 2012 13:58:10 -0600 Original-Received: from dradamslap1 (/10.159.239.69) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 31 Dec 2012 11:58:10 -0800 X-Mailer: Microsoft Office Outlook 11 In-reply-to: <87ehi6j943.fsf@fleche.redhat.com> Thread-Index: Ac3nj9vxLkQUAL7tSL655ghzxo+p9gAALWKQ X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157 X-Source-IP: acsinet22.oracle.com [141.146.126.238] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4.x-2.6.x [generic] X-Received-From: 141.146.126.69 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:156039 Archived-At: > Ted> add DVCS support to package.el, supporting Git and > Ted> Bazaar, with the notion of "pull packages from repo X > Ted> at tag/commit Y" in addition to the current "pull packages > Ted> from URLs". The VC package has to be involved > Ted> here, instead of writing custom code. > > What is the reason for this? > > FWIW, I considered and rejected this approach when writing package.el. > My reason was that I wanted packaging not to require any > external tools, so it would be available to all Emacs users. > Also, KISS. > > Mixing in VC seems to add a lot of potential failure modes. +1 If Emacs Dev really wants to do this, why not separate it from package.el and make its use optional?