[Popcon-developers] Bug#97045: Please track package versions

[ballombe@debian.org (Bill Allombert)]

On Fri, Oct 31, 2014 at 09:24:05PM +0000, Sandro Tosi wrote:
> Hello,
> It would be really interesting to start reporting also the version of
> the package, for example it could answer questions like: how many have
> installed the last upload in sid vs the version in testing? 

The time granularity of popcon is larger than the current delay between
sid and testing, so I doubt it would work.

> I think
> the default visualization should remain as is, but with the
> possibility to drill down on versions.
> 
> I dont honestly see how reporting a version cloud leak any personal
> information or violate one's privacy, as long as we report versions
> released on debian archives.

If you still use an outdated version of a package with a security hole, you
might not want to broadcast the fact, even if the package was part of the
Debian archives in the past, and even if you do not know yet about the hole.

Cheers,
-- 
Bill. <ballombe at debian.org>

Imagine a large red swirl here.