From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id SFqhDI1aBmMeZAEAbAwnHQ (envelope-from ) for ; Wed, 24 Aug 2022 19:06:21 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id IE6yDI1aBmN3cAEA9RJhRA (envelope-from ) for ; Wed, 24 Aug 2022 19:06:21 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E6256426EB for ; Wed, 24 Aug 2022 19:06:20 +0200 (CEST) Received: from localhost ([::1]:45140 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oQtpc-0000P9-0K for larch@yhetil.org; Wed, 24 Aug 2022 13:06:20 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:50582) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oQtp8-0000Ml-CS for help-guix@gnu.org; Wed, 24 Aug 2022 13:05:50 -0400 Received: from mout-p-102.mailbox.org ([80.241.56.152]:39826) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1oQtp6-0007sE-FA for help-guix@gnu.org; Wed, 24 Aug 2022 13:05:50 -0400 Received: from smtp1.mailbox.org (smtp1.mailbox.org [10.196.197.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-102.mailbox.org (Postfix) with ESMTPS id 4MCXY23cc5z9sQL; Wed, 24 Aug 2022 19:05:42 +0200 (CEST) Date: Wed, 24 Aug 2022 17:05:41 +0000 (UTC) From: Jonathan Scoresby To: "(" Cc: help-guix@gnu.org Message-ID: <27eaf18a-f99a-4c48-9819-493cc40275e3@jonscoresby.com> In-Reply-To: References: <2099203680.635993.1661358232923@office.mailbox.org> <960527982.637637.1661359935673@office.mailbox.org> Subject: Re: Rust Packaging without crates.io MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Correlation-ID: <27eaf18a-f99a-4c48-9819-493cc40275e3@jonscoresby.com> Received-SPF: pass client-ip=80.241.56.152; envelope-from=me@jonscoresby.com; helo=mout-p-102.mailbox.org X-Spam_score_int: -25 X-Spam_score: -2.6 X-Spam_bar: -- X-Spam_report: (-2.6 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1661360780; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=OQRDuF0hrMyOZJmUxeIaj7blioSuEUs4FXd3aLE8dGk=; b=R/AFY0HbjCdGXPOYQP3nYw/SvKRqTM6Nqey90euQk7kYEPT8xzhjqoAwaiipjH4bApSqp1 MuS3tRQfSOMiFySURVq7ojuUVPENr6XBTuHSMsOPYzDEYlOhNqZ4zGhvlA19sRA8sAX2FG rGiYlNe3VF3RoMLTYV2wuvKF9cOR+DUfKnP2vw1x8z1AekrTpQ8WJ5bTTDdgNSMZgL1xIJ a2ud5ikivk/NTgTc82/Lgfx/P/r7Q8kSYM0/xHv9snuviJjj6Oq9xdhO0PLrJ9K78dkSod +X5cv95t6ZzjUIObAdQDAqrJe0rHrkk0Wm67iD3/4MVD3isxkZXP1fCDu84vkA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1661360780; a=rsa-sha256; cv=none; b=tTOsZJfvarkhMliW8rg8d/4IjJw6OHiIFpLV0qnInJQ4UaS++c+Z208bw2K5cyDRKUyzZ3 HmuMTFMiXqp2CJFFXpMiW4Epwthzsy9Uv4snQEmI0RiT0v/MVoAJd5Q+PY8QODqIxUlh3s uyLLxjZ8pGG6n9tAB4eQZ6PLe9RbJssnysWOVMmNnMf8h57wXqd9cFCN3FDv4hvgyzbgdq GhKiKzq6AlbFtZ7X17jtHnZcL0h9WZmOX6vq8/stknscN060gvgtfx0cczvQ2Ogom9h4hn fp0JisDCv7LXYJTl72RzocTyaA+96ljubHtcLzBiroOfkLnQh1FJ0gJ0fxwmeg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.71 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: E6256426EB X-Spam-Score: -2.71 X-Migadu-Scanner: scn1.migadu.com X-TUID: 1CST6kiwRbfJ I mean that the referenced package could be anything. I feel like guix should somehow verify that the referenced package was built from the source specified in the cargo.toml. Also, it does not check the version. If the main package changed to depend on a newer version, the suggested more of creating a package definition would allow one to build the new package using the outdated dependency. Anywhere I can read about antioxidant? -Jonathan