There's been a spike in package takeover attempts lately, many for packages by well-known members of the community - is there some reason they're all happening? Tom

El 30 oct 2018, a las 13:11, Malcolm Wallace via Libraries escribió:

I am afraid I have been rather lax at maintaining these packages recently, for which I apologise. Since darcs.haskell.org closed, it has been difficult to publish updates. I am in the process of converting the darcs repositories into git, but I have hit a roadblock in finding a host for these. Github for instance is not able to accept any upload from my version of git (an ancient 1.7.7.5 on MacOS 10.7), because my machine's version of OpenSSL is too old. I have tried various ways to build a newer git, but am so far continuing to fail.

I may go back to keeping the repos in darcs, and find some simple webhosting instead.

Regards, Malcolm

...

On 30 Oct 2018, at 15:59, Herbert Valerio Riedel wrote:

Peter,

On 2018-10-30 at 16:50:59 +0100, Peter Simons wrote:

[...]

...

I tried to contact Malcolm on 2018-09-24 via e-mail. Others have also tried to reach him through WhatsApp other channels. Unfortunately, no-one has received a response, which is why we decided to go through with this process.

It's not completely accurate that *nobody* has received a response: I have actually received a response from Malcolm last week in order to coordinate how to have the Hackage Trustees handle the situation; and I intend to proceed with performing the NMUs during this week.

Herbert _______________________________________________ Libraries mailing list Libraries@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries

_______________________________________________ Libraries mailing list Libraries@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries

At risk of stating the obvious, it is quite important for security of our ecosystem that maintainers of key components use up-to-date software. Both Git and OpenSSL have had serious security bugs in the recent past, including remote-code execution in the case of Git. On 2018-10-30 17:11, Malcolm Wallace via Libraries wrote:

Github for instance is not able to accept any upload from my version of git (an ancient 1.7.7.5 on MacOS 10.7), because my machine's version of OpenSSL is too old. I have tried various ways to build a newer git, but am so far continuing to fail.

Are you aware of darcshub? It's where I host all my darcs repositories. Cheers On 10/31/18 3:17 PM, Malcolm Wallace via Libraries wrote:

I am afraid I have been rather lax at maintaining these packages recently, for which I apologise. Since darcs.haskell.org closed, it has been difficult to publish updates. I am in the process of converting the darcs repositories into git, but I have hit a roadblock in finding a host for these. Github for instance is not able to accept any upload from my version of git (an ancient 1.7.7.5 on MacOS 10.7), because my machine's version of OpenSSL is too old. I have tried various ways to build a newer git, but am so far continuing to fail.

I may go back to keeping the repos in darcs, and find some simple webhosting instead.

Regards, Malcolm

On 30 Oct 2018, at 15:59, Herbert Valerio Riedel wrote:

...

Peter,

On 2018-10-30 at 16:50:59 +0100, Peter Simons wrote:

[...]

...

I tried to contact Malcolm on 2018-09-24 via e-mail. Others have also tried to reach him through WhatsApp other channels. Unfortunately, no-one has received a response, which is why we decided to go through with this process. It's not completely accurate that *nobody* has received a response: I have actually received a response from Malcolm last week in order to coordinate how to have the Hackage Trustees handle the situation; and I intend to proceed with performing the NMUs during this week.

Herbert _______________________________________________ Libraries mailing list Libraries@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries

---

Libraries mailing list Libraries@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries

Yes! On 10/31/18 6:39 PM, Carter Schonwald wrote:

https://hub.darcs.net/  specifically right?

On Wed, Oct 31, 2018 at 6:28 PM Vanessa McHale mailto:vanessa.mchale@iohk.io> wrote:

Are you aware of darcshub? It's where I host all my darcs repositories.

Cheers

On 10/31/18 3:17 PM, Malcolm Wallace via Libraries wrote: > I am afraid I have been rather lax at maintaining these packages recently, for which I apologise.  Since darcs.haskell.org http://darcs.haskell.org closed, it has been difficult to publish updates.  I am in the process of converting the darcs repositories into git, but I have hit a roadblock in finding a host for these.  Github for instance is not able to accept any upload from my version of git (an ancient 1.7.7.5 on MacOS 10.7), because my machine's version of OpenSSL is too old.  I have tried various ways to build a newer git, but am so far continuing to fail. > > I may go back to keeping the repos in darcs, and find some simple webhosting instead. > > Regards, >    Malcolm > > On 30 Oct 2018, at 15:59, Herbert Valerio Riedel wrote: > >> Peter, >> >> On 2018-10-30 at 16:50:59 +0100, Peter Simons wrote: >> >> [...] >> >>> I tried to contact Malcolm on 2018-09-24 via e-mail. Others have also >>> tried to reach him through WhatsApp other channels. Unfortunately, >>> no-one has received a response, which is why we decided to go through >>> with this process. >> It's not completely accurate that *nobody* has received a response: I >> have actually received a response from Malcolm last week in order to >> coordinate how to have the Hackage Trustees handle the situation; and I >> intend to proceed with performing the NMUs during this week. >> >> >> Herbert >> _______________________________________________ >> Libraries mailing list >> Libraries@haskell.org mailto:Libraries@haskell.org >> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries > _______________________________________________ > Libraries mailing list > Libraries@haskell.org mailto:Libraries@haskell.org > http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries

_______________________________________________ Libraries mailing list Libraries@haskell.org mailto:Libraries@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries

Am 01.11.18 um 02:11 schrieb Francesco Ariis:

On Wed, Oct 31, 2018 at 08:17:03PM +0000, Malcolm Wallace via Libraries wrote:

...

Since darcs.haskell.org closed, it has been difficult to publish updates.

As Vanessa suggested, darcshub is a very good option.

Darcs developer here. It is enouraging to see that not everyone has given up on Darcs. I agree that hub.darcs.net is probably the most suitable place to host a Darcs repo nowadays. (It has a few limitations which I hope will be lifted at some point.) Cheers Ben

maybe this is a conversation you can have with haskell.org and/or the haskell infrastructure teams? On Mon, Nov 5, 2018 at 12:07 PM Simon Michael wrote:

On 11/5/18 2:01 AM, Ben Franksen wrote:

...

Am 01.11.18 um 02:11 schrieb Francesco Ariis:

...

On Wed, Oct 31, 2018 at 08:17:03PM +0000, Malcolm Wallace via Libraries wrote:

...

Since darcs.haskell.org closed, it has been difficult to publish updates. As Vanessa suggested, darcshub is a very good option. Darcs developer here. It is enouraging to see that not everyone has given up on Darcs.

I agree that hub.darcs.net is probably the most suitable place to host a Darcs repo nowadays. (It has a few limitations which I hope will be lifted at some point.)

Darcs hub maintainer here. I'm glad some folks, including haskell developers, are still finding this useful.

Darcs (David's Advanced Revision Control System) was once a flagship Haskell project and many of us still have affection for it.

Darcs hub (http://hub.darcs.net) is a github-like hosting site for darcs users, running since 2012. It is the successor to the earlier darcs-hosting sites patch-tag.com and darcsden.com. It currently has 2800 repos, public and private, and 1400 user accounts. If you try it and want to push/pull via ssh, you'll need to follow the "How do I connect with ssh?" FAQ entry on the front page.

Unfortunately for a while now I have been able to give it only essential maintenance and support time. I currently don't have much idea what's happening on darcs hub, except when I hear about problems from users or the hosting provider (Linode).

This works ok, but I periodically wonder

- how much need there is for this site to continue

- if worthwhile funding could be raised for it

- how long I should continue hosting it in "free time", unable to improve things much, and on call for unpredictable urgent data loss/compromise/legal compliance work

- if I were to stop, whether handoff to a new owner would end up successful, or if I should just wind it down and let others do what they will

Darcs hub is humming along fine. I'm just taking the opportunity to put out some thoughts, and would like to hear yours...

Best! -Simon

_______________________________________________ Libraries mailing list Libraries@haskell.org http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries