Re: libmail-audit-perl: fix or drop?
Hi,
I'm all in favour of getting rid of bad quality perl packages. Unless
popcon suggest a high usage, get rid of it.
Thanks for your valuable work, Niko! It's great to see some Perl action
here again.
Greetings,
Joachim
Am Montag, den 19.12.2005, 17:18 +0200 schrieb Niko Tyni:
> Hi,
>
> I'm looking at libmail-audit-perl, and it seems to have quite many
> issues:
>
> * insecure /tmp handling (#344029)
> + serious
> + easy to fix
> * insufficient mbox locking (#127558)
> + should probably be serious, as it's a policy violation
> + fix by using lockfile-progs?
> * doesn't work with lists + maildir (#253505)
> + partial patch exists but backwards-compatibility is an issue
> * uses /var/spool/mail (#272303)
> + trivial to fix
>
> Since the module is officially unsupported upstream [1], I'm
> wondering if it's time to drop the package rather than fix it.
> Upstream recommends Email::Filter as a replacement, but that
> isn't packaged for Debian yet.
>
> The only reverse dependency for libmail-audit-perl (except for
> mail-audit-tools, which comes from the same source package) is
> a Suggests: in libmail-tools-perl.
>
> Opinions?
>
> [1] http://cpanratings.perl.org/dist/Mail-Audit
> --
> Niko Tyni ntyni@cc.helsinki.fi
>
--
Joachim "nomeata" Breitner
Debian Developer
nomeata@debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C
JID: joachimbreitner@amessage.de | http://people.debian.org/~nomeata
Reply to: