www.digitalmars.com         C & C++   DMDScript  

digitalmars.D - replacing removed projects in dub

reply Steven Schveighoffer <schveiguy gmail.com> writes:
Everyone has seen this happen sometimes. An open-source author deletes 
their account or the repository, and then the source is gone. The latest 
is this project:

https://code.dlang.org/packages/raylib-d

Which I have been using to teach a class.

But of course, it's open source, so we can continue.

What does one do when the project is deleted from view? I can register a 
copy of it, but it seems rather annoying if one has to do this kind of 
stuff. Plus, now I have to come up with a different name (and have 
projects update all their dependencies).

Should it be possible to "take over" a project in dub once the 
maintainer has deleted all their stuff? I have a copy of the repo 
(thanks to WebFreak), so I could do it, but I wonder if dub shouldn't 
have a way to mitigate this type of problem.

Also, if anyone has any information about why this happened, let me know 
(you can email me if you want to speak privately), I want to make sure 
the original author really meant to do this before I register a copy of 
their stuff.

-Steve
Mar 11 2021
next sibling parent reply ryuukk_ <ryuukk_ gmail.com> writes:
On Thursday, 11 March 2021 at 22:17:59 UTC, Steven Schveighoffer 
wrote:

 Everyone has seen this happen sometimes. An open-source author 
 deletes their account or the repository, and then the source is 
 gone. The latest is this project:

 https://code.dlang.org/packages/raylib-d

 Which I have been using to teach a class.

 But of course, it's open source, so we can continue.

 What does one do when the project is deleted from view? I can 
 register a copy of it, but it seems rather annoying if one has 
 to do this kind of stuff. Plus, now I have to come up with a 
 different name (and have projects update all their 
 dependencies).

 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the 
 repo (thanks to WebFreak), so I could do it, but I wonder if 
 dub shouldn't have a way to mitigate this type of problem.

 Also, if anyone has any information about why this happened, 
 let me know (you can email me if you want to speak privately), 
 I want to make sure the original author really meant to do this 
 before I register a copy of their stuff.

 -Steve


Looks like he closed his github account entirely

raylib is a C library so it is pretty easy to generate bindings 
for it!

There are ton of other bindings for raylib for D on github:

https://github.com/Soaku/raylib-d
https://github.com/o3o/bindbc-raylib

And a little reminder, to generating bindings for header is super 
simple with dstep:

https://github.com/jacob-carlborg/dstep
Mar 11 2021
parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/11/21 5:57 PM, ryuukk_ wrote:

 
 Looks like he closed his github account entirely
 
 raylib is a C library so it is pretty easy to generate bindings for it!


raylib-d had more than just bindings.


 
 There are ton of other bindings for raylib for D on github:
 
 https://github.com/Soaku/raylib-d


This is actually a clone of the raylib-d repository. I don't know if 
it's registered yet.


 https://github.com/o3o/bindbc-raylib


This is just a binding, which is OK if that's all I wanted for a new 
project. I want my code that I've built over the last year to work 
without having to re-engineer everything.

-Steve
Mar 12 2021
parent Imperatorn <johan_forsberg_86 hotmail.com> writes:
On Friday, 12 March 2021 at 14:45:29 UTC, Steven Schveighoffer 
wrote:

 On 3/11/21 5:57 PM, ryuukk_ wrote:

 
 Looks like he closed his github account entirely
 
 raylib is a C library so it is pretty easy to generate 
 bindings for it!


 raylib-d had more than just bindings.


 
 There are ton of other bindings for raylib for D on github:
 
 https://github.com/Soaku/raylib-d


 This is actually a clone of the raylib-d repository. I don't 
 know if it's registered yet.


 https://github.com/o3o/bindbc-raylib


 This is just a binding, which is OK if that's all I wanted for 
 a new project. I want my code that I've built over the last 
 year to work without having to re-engineer everything.

 -Steve


We should have a local copy in our registry, synching if smth 
changes or smth.
Mar 12 2021
prev sibling next sibling parent reply James Blachly <james.blachly gmail.com> writes:
On 3/11/21 5:17 PM, Steven Schveighoffer wrote:


 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the repo 
 (thanks to WebFreak), so I could do it, but I wonder if dub shouldn't 
 have a way to mitigate this type of problem.


Unequivocally no. Replacing new code into the same namespace as an 
existing/established package is a major potential malware vector.
Mar 12 2021
parent Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/12/21 8:46 AM, James Blachly wrote:

 On 3/11/21 5:17 PM, Steven Schveighoffer wrote:
 

 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the repo 
 (thanks to WebFreak), so I could do it, but I wonder if dub shouldn't 
 have a way to mitigate this type of problem.


 
 Unequivocally no. Replacing new code into the same namespace as an 
 existing/established package is a major potential malware vector.


It's not new code, I just want to restore the code that was removed.

This isn't much different than a repo owner giving the reins to someone 
else.

Perhaps there needs to be qualifications for doing this.

As of now, I need the project for tonight, so I will register a clone 
under a new name.

-Steve
Mar 12 2021
prev sibling next sibling parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/11/21 5:17 PM, Steven Schveighoffer wrote:

 Everyone has seen this happen sometimes. An open-source author deletes 
 their account or the repository, and then the source is gone. The latest 
 is this project:
 
 https://code.dlang.org/packages/raylib-d
 



 Also, if anyone has any information about why this happened, let me know 
 (you can email me if you want to speak privately), I want to make sure 
 the original author really meant to do this before I register a copy of 
 their stuff.


FYI, I registered raylib-d2, which has been updated with all tags to use 
the new name (so all you need to do if you depend on raylib-d, is to 
change it to raylib-d2)

As long as the original author does not respond, I'll maintain that 
library, but probably not actively.

https://github.com/schveiguy/raylib-d2

-Steve
Mar 12 2021
next sibling parent reply Siemargl <inqnone gmail.com> writes:
On Friday, 12 March 2021 at 16:18:07 UTC, Steven Schveighoffer 
wrote:

 On 3/11/21 5:17 PM, Steven Schveighoffer wrote:

 Everyone has seen this happen sometimes. An open-source author 
 deletes their account or the repository, and then the source 
 is gone. The latest is this project:
 
 https://code.dlang.org/packages/raylib-d
 



 Also, if anyone has any information about why this happened, 
 let me know (you can email me if you want to speak privately), 
 I want to make sure the original author really meant to do 
 this before I register a copy of their stuff.


 FYI, I registered raylib-d2, which has been updated with all 
 tags to use the new name (so all you need to do if you depend 
 on raylib-d, is to change it to raylib-d2)

 As long as the original author does not respond, I'll maintain 
 that library, but probably not actively.

 https://github.com/schveiguy/raylib-d2

 -Steve


I think you're right. If the licence permits copying.

DUB supports hosting sites for libs other than github? Some 
people don't like MS.

P.S. Covid is not such evil, as written in news, especially for 
young people. But get well.
Mar 12 2021
parent Paul Backus <snarwin gmail.com> writes:
On Friday, 12 March 2021 at 21:45:48 UTC, Siemargl wrote:

 DUB supports hosting sites for libs other than github? Some 
 people don't like MS.


It supports github, bitbucket, and gitlab.
Mar 13 2021
prev sibling parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/12/21 11:18 AM, Steven Schveighoffer wrote:

 On 3/11/21 5:17 PM, Steven Schveighoffer wrote:

 Everyone has seen this happen sometimes. An open-source author deletes 
 their account or the repository, and then the source is gone. The 
 latest is this project:

 https://code.dlang.org/packages/raylib-d


 

 Also, if anyone has any information about why this happened, let me 
 know (you can email me if you want to speak privately), I want to make 
 sure the original author really meant to do this before I register a 
 copy of their stuff.


 
 FYI, I registered raylib-d2, which has been updated with all tags to use 
 the new name (so all you need to do if you depend on raylib-d, is to 
 change it to raylib-d2)
 
 As long as the original author does not respond, I'll maintain that 
 library, but probably not actively.
 
 https://github.com/schveiguy/raylib-d2


I did not get a response, but the maintainer (or someone else) must have 
logged in and redirected to my repo for raylib-d.

So raylib-d will live on under my account! I'll make the repo archived 
and note that in the README (probably put in a pragma(msg) to tell 
people to switch).

I'll release raylib-d v3.0.4 with the latest stuff (there was some code 
that hadn't been released).

-Steve
Mar 19 2021
parent Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/19/21 10:47 AM, Steven Schveighoffer wrote:

 I'll make the repo archived and note that in the README (probably put in 
 a pragma(msg) to tell people to switch).


Oof, I meant the *raylib-d2* repo. Not the raylib-d repo!

-Steve
Mar 19 2021
prev sibling next sibling parent reply Robert Schadek <rschadek symmetryinvestments.com> writes:
 Which I have been using to teach a class.


Cool! Whom are you teaching D where? If I may ask
Mar 12 2021
parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/12/21 3:32 PM, Robert Schadek wrote:

 Which I have been using to teach a class.


 
 Cool! Whom are you teaching D where? If I may ask
 


My son and other homeschool kids, and online at the moment (before Covid 
it was at my house)

-Steve
Mar 12 2021
parent Robert Schadek <rschadek symmetryinvestments.com> writes:
 My son and other homeschool kids, and online at the moment 
 (before Covid it was at my house)

 -Steve


Very cool.
Mar 13 2021
prev sibling parent reply Jacob Carlborg <doob me.com> writes:
On Thursday, 11 March 2021 at 22:17:59 UTC, Steven Schveighoffer 
wrote:

 Everyone has seen this happen sometimes. An open-source author 
 deletes their account or the repository, and then the source is 
 gone. The latest is this project:

 https://code.dlang.org/packages/raylib-d

 Which I have been using to teach a class.

 But of course, it's open source, so we can continue.

 What does one do when the project is deleted from view? I can 
 register a copy of it, but it seems rather annoying if one has 
 to do this kind of stuff. Plus, now I have to come up with a 
 different name (and have projects update all their 
 dependencies).

 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the 
 repo (thanks to WebFreak), so I could do it, but I wonder if 
 dub shouldn't have a way to mitigate this type of problem.


This wouldn't be a problem if the Dub registry wasn't directly 
tied to GitHub (or other similar services). It would be better if 
it was more difficult to remove a package from the Dub registry.

With RubyGems, a package is not tied to GitHub but it's instead 
an artifact that has been uploaded. If the user closes the GitHub 
account the package will still be available in the RubyGems 
registry.

I think it's becoming more and more problematic with the Dub 
being directly tied to GitHub.

--
/Jacob Carlborg
Mar 17 2021
parent reply Imperatorn <johan_forsberg_86 hotmail.com> writes:
On Wednesday, 17 March 2021 at 10:04:46 UTC, Jacob Carlborg wrote:

 On Thursday, 11 March 2021 at 22:17:59 UTC, Steven 
 Schveighoffer wrote:

 [...]


 This wouldn't be a problem if the Dub registry wasn't directly 
 tied to GitHub (or other similar services). It would be better 
 if it was more difficult to remove a package from the Dub 
 registry.

 With RubyGems, a package is not tied to GitHub but it's instead 
 an artifact that has been uploaded. If the user closes the 
 GitHub account the package will still be available in the 
 RubyGems registry.

 I think it's becoming more and more problematic with the Dub 
 being directly tied to GitHub.

 --
 /Jacob Carlborg


Agreed, I've said before we should have a buffer/backup
Mar 17 2021
parent reply WebFreak001 <d.forum webfreak.org> writes:
On Wednesday, 17 March 2021 at 10:14:39 UTC, Imperatorn wrote:

 On Wednesday, 17 March 2021 at 10:04:46 UTC, Jacob Carlborg 
 wrote:

 On Thursday, 11 March 2021 at 22:17:59 UTC, Steven 
 Schveighoffer wrote:

 [...]


 This wouldn't be a problem if the Dub registry wasn't directly 
 tied to GitHub (or other similar services). It would be better 
 if it was more difficult to remove a package from the Dub 
 registry.

 With RubyGems, a package is not tied to GitHub but it's 
 instead an artifact that has been uploaded. If the user closes 
 the GitHub account the package will still be available in the 
 RubyGems registry.

 I think it's becoming more and more problematic with the Dub 
 being directly tied to GitHub.

 --
 /Jacob Carlborg


 Agreed, I've said before we should have a buffer/backup


In case anyone needs it, I always have a backup of all packages 
so you can message me if you are missing something deleted.
Mar 17 2021
parent Imperatorn <johan_forsberg_86 hotmail.com> writes:
On Wednesday, 17 March 2021 at 20:07:40 UTC, WebFreak001 wrote:

 On Wednesday, 17 March 2021 at 10:14:39 UTC, Imperatorn wrote:

 On Wednesday, 17 March 2021 at 10:04:46 UTC, Jacob Carlborg 
 wrote:

 [...]


 Agreed, I've said before we should have a buffer/backup


 In case anyone needs it, I always have a backup of all packages 
 so you can message me if you are missing something deleted.


Splendid, that's good to know! 🍀
Mar 17 2021