Re: Package statistics by downloads

Boyuan Yang <[email protected]>
Newsgroups gmane.linux.debian.devel.www
Message-ID <[email protected]>
Hi,

在 4/22/2025 3:33 PM, Erik Schulz 写道:
> I'm interested in package popularity. I'm aware of popcon
> (https://popcon.debian.org/), but I'm more interested in actual
> downloads.
> 
> Do the debian mirrors track unique downloads (e.g. by hashed IP
> address), and if no, why not? I can understand the privacy argument,
> but arguably package downloads aren't particularly revealing? And data
> could be aggregated daily, thus limiting exposure.

You are writing to the debian-www mailing list, which is dedicated to
website development and not about popcon. Since this is a generic question
aroud Debian development, please redirect your question to
https://lists.debian.org/debian-devel/ .

Side note on my personal opinion: No one in Debian seems wanted to collect
such information. Even if such data collection is to be collected, one has
to determine where to collect that data from, either from the downloading
server or from the user.

* If the data is to be collected from the user OS, it will likely face a
greater backslash on privacy concerns compared to the current popcon design.

* If the data is to be collected from the downloading server, that is not
possible -- traditionally Debian did not have control over most of the
package downloading servers (a.k.a. the "repository mirrors"), and in modern
times deb.debian.org is sponsored by CDN companies which are also difficult
to collect per-package download statistics from.

Disclaimer: I never worked on popcon or related fields. Please redirect
your further questions to the debian-devel mailing list.

Thanks,
Boyuan Yang
OpenPGP_signature.asc (application/pgp-signature, 840 B)
-----BEGIN PGP SIGNATURE-----
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=5FNC
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.