Re: Looking for advice on how to deal with potential slop packages

--nextPart3607836.cLl3JjQhRp
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"; protected-headers="v1"
From: "Andreas K. Huettel" <[email protected]>
Date: Mon, 23 Mar 2026 00:53:45 +0100
Message-ID: <2081671.zToM8qfIzz@noumea>
Organization: Gentoo Linux
In-Reply-To: <[email protected]>
MIME-Version: 1.0

Am Samstag, 7. M=C3=A4rz 2026, 16:31:18 Mitteleurop=C3=A4ische Normalzeit s=
chrieb Simon Josefsson:
> Morten Linderud <[email protected]> writes:
>=20
> > A lot of this is probably already a lost cause I think.
>=20
> +1

Here's another example of a (cryptography-related) package gone full auto.

https://github.com/cpan-authors/Crypt-OpenSSL-RSA/commits/main/?after=3D5d7=
e2e6faf3d6938b55aeebd40f5fb2379248c36+34

Lost cause or not, shouldnt we even try to fight this tendency?

I mean, it's one thing to vibe-code a sandboxed browser game where graphics=
 glitches are
the worst possible outcome... but...

=2D-=20
PD Dr. Andreas K. H=C3=BCttel
[email protected]
Gentoo Linux developer=20
(council, comrel, toolchain, base-system, perl, libreoffice)
https://wiki.gentoo.org/wiki/User:Dilfridge
--nextPart3607836.cLl3JjQhRp
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----
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=97Ar
-----END PGP SIGNATURE-----

--nextPart3607836.cLl3JjQhRp--