Bug #60446 for CPAN: please don't allow install of unauthorized releases

Tue Aug 17 21:52:34 2010 MARKLE [...] cpan.org - Ticket created

Subject:

please don't allow install of unauthorized releases

An unauthorized release of Apache::Session (1.88) will not build on CentOS, and `make test` sits there forever. The latest authorized release version of Apache::Session is 1.81 by a different (authorized) maintainer and it builds fine. It would be safer if CPAN ignored unauthorized releases which claim to be production releases.

Wed Aug 18 00:56:25 2010 ANDK [...] cpan.org - Correspondence added

http://matrix.cpantesters.org/?dist=Apache-Session%201.88 It doesn't look like many users share your experience? How about filing a bug report about Apache::Session? Please take note that http://search.cpan.org/~chorny/Apache-Session-1.88/ lists Apache::Session as authorized, only the rest of the distribution is marked as unauthorized. This is probably a mistake and should be reported to CHORNY.

Wed Aug 18 00:56:26 2010 The RT System itself - Status changed from 'new' to 'open'

Wed Aug 18 01:25:19 2010 MARKLE [...] cpan.org - Correspondence added

Show quoted text

> It doesn't look like many users share your experience? How about filing > a bug report about Apache::Session?

How about traveling back in time and giving prophylactics to the parents of the people who developed CentOS? Argh! Mark

Wed Aug 18 01:29:24 2010 ANDK [...] cpan.org - Correspondence added

I'm missing a smiley there. Or maybe I'm missing something else. Please be a bit more specific, I'm probably missing the point.

Wed Aug 18 01:48:33 2010 MARKLE [...] cpan.org - Correspondence added

If I install Apache::Session 1.88 from the source zip file, I still see that uninitialized value warning, but it finishes the test sequence without errors and installs fine. What could be causing it to stall on that test when I try to install it with CPAN? And after I installed that, then a totally unrelated bug with DBIx::Class::Schema::Loader 0.07001 magically cured itself... another bug that no one except me encounters... because I am stuck using CentOS. Nope. No smiley. :-| Mark

Sun Jan 16 14:47:22 2011 ANDK [...] cpan.org - Correspondence added

I don't see an action item for me in this ticket, so I'll set it to rejected (since "resolve" doesn't seem the right state to me). Please reopen if there's something I can do for your case. Sorry.

Sun Jan 16 14:47:23 2011 ANDK [...] cpan.org - Status changed from 'open' to 'rejected'

Sun Jan 16 18:14:10 2011 MARKLE [...] cpan.org - Correspondence added

The particular problem with Apache::Session seems fine recently. I was just suggesting that higher version NMU's by non-authorized maintainers not be selected by CPAN. I remember when I took over Apache2::Pod I had to get approval from the list. I wasn't aware that I could just upload my new version without authorization and it would be automatically selected by CPAN. Thanks. --mark--

Sun Jan 16 18:14:11 2011 The RT System itself - Status changed from 'rejected' to 'open'

Mon Jan 17 02:13:42 2011 ANDK [...] cpan.org - Correspondence added

CPAN policy is pretty close to what you expect. Upload is open to everybody, but indexing (which determines what the cpan clients pick) is limited to authorized maintainers. CHORNY is authorized for Apache::Session contrary to what you perceived.

Mon Jan 17 19:56:15 2011 MARKLE [...] cpan.org - Status changed from 'open' to 'rejected'

Mon Jan 17 19:57:19 2011 MARKLE [...] cpan.org - Correspondence added

This was a dumb bug report, sorry. --m--

Mon Jan 17 19:57:20 2011 The RT System itself - Status changed from 'rejected' to 'open'

Mon Jan 17 19:57:37 2011 MARKLE [...] cpan.org - Status changed from 'open' to 'rejected'