Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients
- To: Reinhard Tartler <siretart@gmail.com>
- Cc: 1029170@bugs.debian.org
- Subject: Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients
- From: Leo Antunes <leo@antun.es>
- Date: Wed, 12 Apr 2023 19:53:50 +0000
- Message-id: <[🔎] dmb_keqS7yxRd7xAkfxnLgkgcb5QkNLwv8A2MVoZ_BH0SZ7eI_JnyKIa5NkKaP4EA0aSJJubOo8Xx8PJshBURYlxYdIR5ag8L_Y07zVYVxg=@antun.es>
- Reply-to: Leo Antunes <leo@antun.es>, 1029170@bugs.debian.org
- In-reply-to: <CAJ0cceYnj9xsC6khrCt64En1RfcdoSA81MdWN+Dnarg5rt6vpw@mail.gmail.com>
- References: <CAJ0cceZpqRfO-OqvUc5TR+ojwXW=hVme5p+d1p8gRs-WT+0Tow@mail.gmail.com> <VKMy3_3axd86D6aRsBmu5cf2FIbmOKnBzf8DsSz3DfmnJZaPDet-Sf802bayHltGH8bH5TpIrlbcS37Xpm2BOFjktK8fKbVK9PMN9rfZ4To=@antun.es> <CAJ0ccea5pDHwgd+iDdcs863ZSmRGSXANMdK1XnCzNTQh8=dOWA@mail.gmail.com> <1674073013.967794.666772@focus> <CAJ0cceZDRAuffBhnGEPaFBpjaQE-+cr9LGPN7=ADB1dG4Zt9JQ@mail.gmail.com> <gpRTtIsqlkF8q2SgC6Z_6kw0njuzZ8QBAk2OZfY5Q5tOCK7Yh1HcYSMhc6ZnNcdVmNxDCt8YVTRJqMubB5Q1Fs2AjtkfuKU1MFKAUNHLN4Y=@antun.es> <1674073013.967794.666772@focus> <CAJ0cceYnj9xsC6khrCt64En1RfcdoSA81MdWN+Dnarg5rt6vpw@mail.gmail.com> <1674073013.967794.666772@focus>
Sorry for the late reply. My laptop decided it was a good time to break, so I'll have even less time to work on this in the next few days/weeks :/
------- Original Message -------
On Sunday, March 26th, 2023 at 22:07, Reinhard Tartler <siretart@gmail.com> wrote:
> Sounds good.
>
> I'm happy to take on the easier dependencies, such as pkg/browser or jellydator/ttlcache.
That would be a huge help already!
> But the dependency on boulder is giving me a massive headache. It is really unfortunate that they chose to use such a heavy dependency for a rather simple task (goodkey). What are your thoughts on resolving this?
I didn't dive deep into the code, but I suspect we can patch away the boulder dep. I'll gladly give it a try as soon as I have a workable laptop again (but feel free to jump in if you find the time!)
Regards,
Leo Antunes
Reply to: