| Subject: | Test::YAML question/security concern |
During a normal "make install", Test::YAML is installed on the system.
Test::YAML includes this line:
use lib 'lib';
It seems like that would be a security issue.
Is Test::YAML intended to be a general-purpose tool for YAML hackers, or
is it really just for testing YAML.pm?
This was brought up regarding the Fedora Extras YAML package
(https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197539). For now
I've just removed Test::YAML from the package, but if it is likely to be
useful to others, I'll add it back in later.