Re: Can't upload a package named "oath" to Hackage

Fumiaki Kinoshita <[email protected]> Thu, 9 Dec 2021 10:15:13 +0900
Newsgroups gmane.comp.lang.haskell.libraries
Message-ID <CAATCwUmw58z92ha8y0Cid9UW4PRL9GBkysBDDrj3cWSGZyBAAQ@mail.gmail.com>
If typo-squatting is a thing, they should be done against existing
packages, not for non-existing ones... I don't think it should prevent
uploading an innocent package anyway.

Btw there are way more confusing ones, like promise vs. promises, future
vs. futures...

2021年12月9日(木) 6:59 David Feuer <[email protected]>:

> How are the trustees to know whether someone "deserves" to take a security
> sensitive name? And "typos" can often be intentional when two packages each
> deserve similar names. I think it's reasonable for trustees to step in if a
> name is actually abused, but I don't support squatting.
>
> On Wed, Dec 8, 2021, 4:53 PM Carter Schonwald <[email protected]>
> wrote:
>
>> Yeah. Typo squatting is or case squatting in helping preventing weird
>> security / bug issues sounds sane to me
>>
>> On Wed, Dec 8, 2021 at 3:00 PM Jon Purdy <[email protected]>
>> wrote:
>>
>>>
>>> On Fri, Dec 3, 2021 at 6:34 AM Fumiaki Kinoshita <[email protected]>
>>> wrote:
>>>
>>>> Looking at other "reserved package names in the list, "all", "project",
>>>> "test" are understandable but it's hard to think of any reason why oath
>>>> should be reserved.
>>>>
>>>
>>> When I first saw this thread, I guessed that it was reserved to prevent
>>> typosquatting for “oauth” (OAuth <https://en.wikipedia.org/wiki/OAuth>).
>>>
>>> _______________________________________________
>>> Libraries mailing list
>>> [email protected]
>>> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries
>>>
>> _______________________________________________
>> Libraries mailing list
>> [email protected]
>> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries
>>
> _______________________________________________
> Libraries mailing list
> [email protected]
> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries
>

_______________________________________________
Libraries mailing list
[email protected]
http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries