Re: Can't upload a package named "oath" to Hackage
Fumiaki Kinoshita <[email protected]> Thu, 9 Dec 2021 10:15:13 +0900
| Newsgroups | gmane.comp.lang.haskell.libraries |
|---|---|
| Message-ID | <CAATCwUmw58z92ha8y0Cid9UW4PRL9GBkysBDDrj3cWSGZyBAAQ@mail.gmail.com> |
If typo-squatting is a thing, they should be done against existing packages, not for non-existing ones... I don't think it should prevent uploading an innocent package anyway. Btw there are way more confusing ones, like promise vs. promises, future vs. futures... 2021年12月9日(木) 6:59 David Feuer <[email protected]>: > How are the trustees to know whether someone "deserves" to take a security > sensitive name? And "typos" can often be intentional when two packages each > deserve similar names. I think it's reasonable for trustees to step in if a > name is actually abused, but I don't support squatting. > > On Wed, Dec 8, 2021, 4:53 PM Carter Schonwald <[email protected]> > wrote: > >> Yeah. Typo squatting is or case squatting in helping preventing weird >> security / bug issues sounds sane to me >> >> On Wed, Dec 8, 2021 at 3:00 PM Jon Purdy <[email protected]> >> wrote: >> >>> >>> On Fri, Dec 3, 2021 at 6:34 AM Fumiaki Kinoshita <[email protected]> >>> wrote: >>> >>>> Looking at other "reserved package names in the list, "all", "project", >>>> "test" are understandable but it's hard to think of any reason why oath >>>> should be reserved. >>>> >>> >>> When I first saw this thread, I guessed that it was reserved to prevent >>> typosquatting for “oauth” (OAuth <https://en.wikipedia.org/wiki/OAuth>). >>> >>> _______________________________________________ >>> Libraries mailing list >>> [email protected] >>> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries >>> >> _______________________________________________ >> Libraries mailing list >> [email protected] >> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries >> > _______________________________________________ > Libraries mailing list > [email protected] > http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries > _______________________________________________ Libraries mailing list [email protected] http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries