From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Baines Subject: Re: Guix Data Services: whishlist about SWH Date: Sun, 16 Feb 2020 09:00:35 +0000 Message-ID: <87y2t2zz2k.fsf@cbaines.net> References: Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:36985) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1j3Fn9-00028o-1l for guix-devel@gnu.org; Sun, 16 Feb 2020 04:00:44 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1j3Fn7-0008A6-SV for guix-devel@gnu.org; Sun, 16 Feb 2020 04:00:42 -0500 Received: from mira.cbaines.net ([212.71.252.8]:55286) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1j3Fn7-00089m-M6 for guix-devel@gnu.org; Sun, 16 Feb 2020 04:00:41 -0500 In-reply-to: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane-mx.org@gnu.org Sender: "Guix-devel" To: zimoun Cc: Guix Devel --=-=-= Content-Type: text/plain zimoun writes: > Recently, the source of package was missing and so "guix time-machine" > was broken [1]. It is not the first time that it appears [2]; patches > are coming... :-) > > Using the Software Heritage (SWH) API [3], does it seems a good idea > to add SWH coverage somewhere in the Guix Data Services? > > I do not remember where the Reproducibility chart is located, but a > chart there could be added, telling how many packages are already > archived in SWH and how many not yet. > > And for example, on the webpage about the history of the package [4], > some information about SWH could be added. > > What do you think? I think that would be good data to have in the Guix Data Service. I'm not sure quite how this data would fit in, I guess it would be similar to the data for nar files, but more limited to fixed output derivations. I think the first step towards this would be to experiment with fetching data from the Software Heritage API. Do you know how you'd fetch data about the output from a fixed output derivation (like harfbuzz)? http://data.guix.gnu.org/gnu/store/53mfydv96wfwg2fxjyyml44v7v2y84z3-harfbuzz-2.5.3.tar.xz > [1] https://debbugs.gnu.org/cgi/bugreport.cgi?bug=39575 > [2] https://debbugs.gnu.org/cgi/bugreport.cgi?bug=28659 > [3] https://archive.softwareheritage.org/api/ > [4] http://data.guix.gnu.org/repository/1/branch/master/package/harfbuzz > > > (Note that on [4] the version 2.4.0 which is the culprit is not shown, > is it expected?) > > All the best, > simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl5JBLNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9XdYYBAAsdAFQjElKHRbaquOe2oME9ZzN7E2L5uL4+IMsEs7IK4TQWRvzJfGtIQJ Yn7k1bBTKhZjqMIRgcOTTntxD8B9AKxzbRUAwH5ByMlRVnDyBJDBNKutdVr0njz3 9OON+CwyxQjz58p5Z9qLFfWyxfqe4NK7MYWt1R5D6bknZM2shgTCAszg8Op97X1v +b1HIHbN0VufpM5/BbaxBtM4s+4WVfDgwiKucidM9ej53ngyOVSrsnwsYlu51ULs ZdHw1ak1KLrYcQoriIdYYfYMcMGWPe5YLci9/M+mNzs/NiCU2pTO76nXkSvgkm0M I7f90Je2veUxynF43zdOCnzsDpnICtO4tcsdsxacTj9n318oHRc+zUFbI3IfLAj+ bVvnJu6Gz24SG2c1/KeXCtlUAOXJAHkYPTJ3kdmFjSthSR7a7+BBZpdxkbCzEyp1 ovBgs+UV+uVJDDmn3X1AddHFqc2mjMCq2yLVgdyg8mBBEZ63QR8MPWwZF+JEOh9E T10ZenPqRVrKsnHILgY1yZIOxbVrRMt/HinhS1DZRlDm51r6n7FICEr0Jfc7RPkw pdm4QuUzhrMKrDoKeePUWZ8EkfOmQ6W5vcKRqSV88G7nvdKSJRt1Di/770mZ1YXk uHLokj8GQmkk3wynbcDZeoc9HBpxqBUP//jvq9qaARPpzciWttU= =zQ7/ -----END PGP SIGNATURE----- --=-=-=--