From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id gByMNnF/AWJ8EwEAgWs5BA (envelope-from ) for ; Mon, 07 Feb 2022 21:22:09 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 0AtuM3F/AWI9PAAAauVa8A (envelope-from ) for ; Mon, 07 Feb 2022 21:22:09 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7D11E349C9 for ; Mon, 7 Feb 2022 21:22:09 +0100 (CET) Received: from localhost ([::1]:33262 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nHAWV-0003Z3-Mo for larch@yhetil.org; Mon, 07 Feb 2022 15:22:07 -0500 Received: from eggs.gnu.org ([209.51.188.92]:59846) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nHAWQ-0003Yv-Dn for guix-patches@gnu.org; Mon, 07 Feb 2022 15:22:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:49980) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nHAWQ-0001bb-4F for guix-patches@gnu.org; Mon, 07 Feb 2022 15:22:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nHAWP-0000If-TV for guix-patches@gnu.org; Mon, 07 Feb 2022 15:22:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#53765] [PATCH 12/17] gnu: Add clojure-com-cognitect-http-client. Resent-From: Maxime Devos Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 07 Feb 2022 20:22:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 53765 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Reily Siegel , 53765@debbugs.gnu.org Received: via spool by 53765-submit@debbugs.gnu.org id=B53765.16442653141141 (code B ref 53765); Mon, 07 Feb 2022 20:22:01 +0000 Received: (at 53765) by debbugs.gnu.org; 7 Feb 2022 20:21:54 +0000 Received: from localhost ([127.0.0.1]:43877 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHAWI-0000IL-Cn for submit@debbugs.gnu.org; Mon, 07 Feb 2022 15:21:54 -0500 Received: from baptiste.telenet-ops.be ([195.130.132.51]:44740) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nHAWF-0000IA-3O for 53765@debbugs.gnu.org; Mon, 07 Feb 2022 15:21:53 -0500 Received: from ptr-bvsjgyhxw7psv60dyze.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:3c5f:2eff:feb0:ba5a]) by baptiste.telenet-ops.be with bizsmtp id sLMo2600B4UW6Th01LMp6n; Mon, 07 Feb 2022 21:21:49 +0100 Message-ID: From: Maxime Devos Date: Mon, 07 Feb 2022 21:21:44 +0100 In-Reply-To: <87h79f32bm.fsf@reilysiegel.com> References: <87y22r32hi.fsf@reilysiegel.com> <87h79f32bm.fsf@reilysiegel.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-nNqXDviNbBivOSA+PCmr" User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22; t=1644265309; bh=bVwEtE1Tcge57sKoaxOEipCLsIkMEwJ3ce/jsou1MV0=; h=Subject:From:To:Date:In-Reply-To:References; b=DqiUWarBM4ahlYTipqqqr+/CYdvNtIkraihZaovbJygjbuY4se6KdpGTDjjlo422W Bca+V6M3Cc2Db0UM8gyl3YV4aMUirVp6V/Pvu/UJu7uM1oLEcFIlPU/VKuQT0GG1Ob 1OnZJyb3nkkKO4YjKerkwp6ow2h0b47oKnBgi9Br0MujFpeo3s9qCpD00zCIcKQ3Dx Mj9sh2eTCp4okxpMNCIoo1kzCo8RwFlvkovKHqo+joZ0X8qRB1FRkrXcUmon3afUBY LTwrS7x4cg2sgs5dzC1ybP5ghbIEupIucwFU1NC00lHi3V0UGYYlYkcELgORiVqtgm OtbGKw83lvJMg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1644265329; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=bVwEtE1Tcge57sKoaxOEipCLsIkMEwJ3ce/jsou1MV0=; b=dSRg62VeU+YsPaBlrQcyjTn+KWieTte8tArlbDXHPoTfEcnwrz36JNnfNsOGFrbvtGBmKl t9vTjQVsYunu3Ov+mcGWEj/ev0B7rn7iweOI7vvRt648Iues0Js5k0kIwQo3vq0/6ercV5 HtiR+7Yi4dTeGw0nB2wikf0aprtzEczqQ6XEoopE9wTDSOlDOLIKNu3F+otq69zADWuiMd i3qxkfOLjHuaGxVM1r1/sFLh58vM7iB5BbL07KdY+e5UMJsRXSX/QNxj1aBcuKROC0VZPN NTagwVPAwJRAbv1/IUV1fv0+2kxF6FANaHFzReTGtGwh0yVPFBMVr4zU9+jtdQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1644265329; a=rsa-sha256; cv=none; b=IndDvtHJtDSQewk91/XgO86DXU54VU2KmYudXO06hkBhgtG4ZdaroO646p+OibjpNMNakU yWDtlNZ10A7BkzLI0knlZFqd5AHgPWIMUsiyRyWwuJBRM5kGQYNMvjTzrUSJifBURmthG7 HT2qvNYtMyg2MC27smsHRtDF5IqK3LcLxeZLcAX4Drs2LFKExCjhpBHQOVi7tndIRjQVTa i3mBht40Xpq0wQ52gTWSXJgzIY+3Y1bhxgflkuDa1zESooim/QEKm7WacjML5MlkZMYk/8 Zdh9Hu/5ZoTyfgW33mYhuy38VUt9I2qTpUG55u6ool75pFDuB7SSJZ8flyybBw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r22 header.b=DqiUWarB; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.23 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r22 header.b=DqiUWarB; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 7D11E349C9 X-Spam-Score: -4.23 X-Migadu-Scanner: scn0.migadu.com X-TUID: xHsy7cf9lUvR --=-nNqXDviNbBivOSA+PCmr Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Reily Siegel schreef op do 03-02-2022 om 19:25 [-0500]: > +(define-public clojure-com-cognitect-http-client > + (package > + (name "clojure-com-cognitect-aws-api") > + (version "1.0.111") > + (source (origin > + (method url-fetch) > + ;; This JAR contains only uncompiled Clojure sources. > + (uri (string-append "https://repo1.maven.org/maven2/" > + "com/cognitect/http-client/" > + version "/http-client-" > + version ".jar")) > + (sha256 > + (base32 > + "0n03vyr6i6n8ll8jn14b5zsba5pndb0ivdwizimz16gd8w3kf5xh"))= )) I downloaded the JAR and verified the hash matches. > + (license license:asl2.0))) >=20 This time, the source code has a COPYING file and the headers of the source code state that it is Apache 2.0, which is good. There's still something weird though: even though the source files later state it's Apache 2.0, initially they state ;; Copyright (c) Cognitect, Inc. ;; All rights reserved. This seems rather contradictory --- do they reserve all monopology rights for theirselves, or do they license it as Apache 2.0, giving people some rights? The intent seems clear here (Apache 2.0), so not a blocker for inclusion in Guix I think, but IANAL and this should ideally eventually be fixed upstream. The files in the zip appear to be actual source code, not compiled something. There indeed doesn't appear to be anything malicious. I'll look into the authenticity later. Greetings, Maxime. --=-nNqXDviNbBivOSA+PCmr Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYgF/WBccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7hYzAQClyrzVAVEUMXrJEXqr6Yj+s9zq BiJGo61t5e7DuggTGgD/c0jBd2rRAALU00IaUCYzU91cqaWu6zbpZE3OO9xJPAQ= =SIDt -----END PGP SIGNATURE----- --=-nNqXDviNbBivOSA+PCmr--