www.digitalmars.com         C & C++   DMDScript  

digitalmars.D - replacing removed projects in dub

reply Steven Schveighoffer <schveiguy gmail.com> writes:
Everyone has seen this happen sometimes. An open-source author deletes 
their account or the repository, and then the source is gone. The latest 
is this project:

https://code.dlang.org/packages/raylib-d

Which I have been using to teach a class.

But of course, it's open source, so we can continue.

What does one do when the project is deleted from view? I can register a 
copy of it, but it seems rather annoying if one has to do this kind of 
stuff. Plus, now I have to come up with a different name (and have 
projects update all their dependencies).

Should it be possible to "take over" a project in dub once the 
maintainer has deleted all their stuff? I have a copy of the repo 
(thanks to WebFreak), so I could do it, but I wonder if dub shouldn't 
have a way to mitigate this type of problem.

Also, if anyone has any information about why this happened, let me know 
(you can email me if you want to speak privately), I want to make sure 
the original author really meant to do this before I register a copy of 
their stuff.

-Steve
Mar 11
next sibling parent reply ryuukk_ <ryuukk_ gmail.com> writes:
On Thursday, 11 March 2021 at 22:17:59 UTC, Steven Schveighoffer 
wrote:
 Everyone has seen this happen sometimes. An open-source author 
 deletes their account or the repository, and then the source is 
 gone. The latest is this project:

 https://code.dlang.org/packages/raylib-d

 Which I have been using to teach a class.

 But of course, it's open source, so we can continue.

 What does one do when the project is deleted from view? I can 
 register a copy of it, but it seems rather annoying if one has 
 to do this kind of stuff. Plus, now I have to come up with a 
 different name (and have projects update all their 
 dependencies).

 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the 
 repo (thanks to WebFreak), so I could do it, but I wonder if 
 dub shouldn't have a way to mitigate this type of problem.

 Also, if anyone has any information about why this happened, 
 let me know (you can email me if you want to speak privately), 
 I want to make sure the original author really meant to do this 
 before I register a copy of their stuff.

 -Steve
Looks like he closed his github account entirely raylib is a C library so it is pretty easy to generate bindings for it! There are ton of other bindings for raylib for D on github: https://github.com/Soaku/raylib-d https://github.com/o3o/bindbc-raylib And a little reminder, to generating bindings for header is super simple with dstep: https://github.com/jacob-carlborg/dstep
Mar 11
parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/11/21 5:57 PM, ryuukk_ wrote:
 
 Looks like he closed his github account entirely
 
 raylib is a C library so it is pretty easy to generate bindings for it!
raylib-d had more than just bindings.
 
 There are ton of other bindings for raylib for D on github:
 
 https://github.com/Soaku/raylib-d
This is actually a clone of the raylib-d repository. I don't know if it's registered yet.
 https://github.com/o3o/bindbc-raylib
This is just a binding, which is OK if that's all I wanted for a new project. I want my code that I've built over the last year to work without having to re-engineer everything. -Steve
Mar 12
parent Imperatorn <johan_forsberg_86 hotmail.com> writes:
On Friday, 12 March 2021 at 14:45:29 UTC, Steven Schveighoffer 
wrote:
 On 3/11/21 5:57 PM, ryuukk_ wrote:
 
 Looks like he closed his github account entirely
 
 raylib is a C library so it is pretty easy to generate 
 bindings for it!
raylib-d had more than just bindings.
 
 There are ton of other bindings for raylib for D on github:
 
 https://github.com/Soaku/raylib-d
This is actually a clone of the raylib-d repository. I don't know if it's registered yet.
 https://github.com/o3o/bindbc-raylib
This is just a binding, which is OK if that's all I wanted for a new project. I want my code that I've built over the last year to work without having to re-engineer everything. -Steve
We should have a local copy in our registry, synching if smth changes or smth.
Mar 12
prev sibling next sibling parent reply James Blachly <james.blachly gmail.com> writes:
On 3/11/21 5:17 PM, Steven Schveighoffer wrote:

 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the repo 
 (thanks to WebFreak), so I could do it, but I wonder if dub shouldn't 
 have a way to mitigate this type of problem.
Unequivocally no. Replacing new code into the same namespace as an existing/established package is a major potential malware vector.
Mar 12
parent Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/12/21 8:46 AM, James Blachly wrote:
 On 3/11/21 5:17 PM, Steven Schveighoffer wrote:
 
 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the repo 
 (thanks to WebFreak), so I could do it, but I wonder if dub shouldn't 
 have a way to mitigate this type of problem.
Unequivocally no. Replacing new code into the same namespace as an existing/established package is a major potential malware vector.
It's not new code, I just want to restore the code that was removed. This isn't much different than a repo owner giving the reins to someone else. Perhaps there needs to be qualifications for doing this. As of now, I need the project for tonight, so I will register a clone under a new name. -Steve
Mar 12
prev sibling next sibling parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/11/21 5:17 PM, Steven Schveighoffer wrote:
 Everyone has seen this happen sometimes. An open-source author deletes 
 their account or the repository, and then the source is gone. The latest 
 is this project:
 
 https://code.dlang.org/packages/raylib-d
 
 Also, if anyone has any information about why this happened, let me know 
 (you can email me if you want to speak privately), I want to make sure 
 the original author really meant to do this before I register a copy of 
 their stuff.
FYI, I registered raylib-d2, which has been updated with all tags to use the new name (so all you need to do if you depend on raylib-d, is to change it to raylib-d2) As long as the original author does not respond, I'll maintain that library, but probably not actively. https://github.com/schveiguy/raylib-d2 -Steve
Mar 12
next sibling parent reply Siemargl <inqnone gmail.com> writes:
On Friday, 12 March 2021 at 16:18:07 UTC, Steven Schveighoffer 
wrote:
 On 3/11/21 5:17 PM, Steven Schveighoffer wrote:
 Everyone has seen this happen sometimes. An open-source author 
 deletes their account or the repository, and then the source 
 is gone. The latest is this project:
 
 https://code.dlang.org/packages/raylib-d
 
 Also, if anyone has any information about why this happened, 
 let me know (you can email me if you want to speak privately), 
 I want to make sure the original author really meant to do 
 this before I register a copy of their stuff.
FYI, I registered raylib-d2, which has been updated with all tags to use the new name (so all you need to do if you depend on raylib-d, is to change it to raylib-d2) As long as the original author does not respond, I'll maintain that library, but probably not actively. https://github.com/schveiguy/raylib-d2 -Steve
I think you're right. If the licence permits copying. DUB supports hosting sites for libs other than github? Some people don't like MS. P.S. Covid is not such evil, as written in news, especially for young people. But get well.
Mar 12
parent Paul Backus <snarwin gmail.com> writes:
On Friday, 12 March 2021 at 21:45:48 UTC, Siemargl wrote:
 DUB supports hosting sites for libs other than github? Some 
 people don't like MS.
It supports github, bitbucket, and gitlab.
Mar 13
prev sibling parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/12/21 11:18 AM, Steven Schveighoffer wrote:
 On 3/11/21 5:17 PM, Steven Schveighoffer wrote:
 Everyone has seen this happen sometimes. An open-source author deletes 
 their account or the repository, and then the source is gone. The 
 latest is this project:

 https://code.dlang.org/packages/raylib-d
 Also, if anyone has any information about why this happened, let me 
 know (you can email me if you want to speak privately), I want to make 
 sure the original author really meant to do this before I register a 
 copy of their stuff.
FYI, I registered raylib-d2, which has been updated with all tags to use the new name (so all you need to do if you depend on raylib-d, is to change it to raylib-d2) As long as the original author does not respond, I'll maintain that library, but probably not actively. https://github.com/schveiguy/raylib-d2
I did not get a response, but the maintainer (or someone else) must have logged in and redirected to my repo for raylib-d. So raylib-d will live on under my account! I'll make the repo archived and note that in the README (probably put in a pragma(msg) to tell people to switch). I'll release raylib-d v3.0.4 with the latest stuff (there was some code that hadn't been released). -Steve
Mar 19
parent Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/19/21 10:47 AM, Steven Schveighoffer wrote:
 I'll make the repo archived and note that in the README (probably put in 
 a pragma(msg) to tell people to switch).
Oof, I meant the *raylib-d2* repo. Not the raylib-d repo! -Steve
Mar 19
prev sibling next sibling parent reply Robert Schadek <rschadek symmetryinvestments.com> writes:
 Which I have been using to teach a class.
Cool! Whom are you teaching D where? If I may ask
Mar 12
parent reply Steven Schveighoffer <schveiguy gmail.com> writes:
On 3/12/21 3:32 PM, Robert Schadek wrote:
 Which I have been using to teach a class.
Cool! Whom are you teaching D where? If I may ask
My son and other homeschool kids, and online at the moment (before Covid it was at my house) -Steve
Mar 12
parent Robert Schadek <rschadek symmetryinvestments.com> writes:
 My son and other homeschool kids, and online at the moment 
 (before Covid it was at my house)

 -Steve
Very cool.
Mar 13
prev sibling parent reply Jacob Carlborg <doob me.com> writes:
On Thursday, 11 March 2021 at 22:17:59 UTC, Steven Schveighoffer 
wrote:
 Everyone has seen this happen sometimes. An open-source author 
 deletes their account or the repository, and then the source is 
 gone. The latest is this project:

 https://code.dlang.org/packages/raylib-d

 Which I have been using to teach a class.

 But of course, it's open source, so we can continue.

 What does one do when the project is deleted from view? I can 
 register a copy of it, but it seems rather annoying if one has 
 to do this kind of stuff. Plus, now I have to come up with a 
 different name (and have projects update all their 
 dependencies).

 Should it be possible to "take over" a project in dub once the 
 maintainer has deleted all their stuff? I have a copy of the 
 repo (thanks to WebFreak), so I could do it, but I wonder if 
 dub shouldn't have a way to mitigate this type of problem.
This wouldn't be a problem if the Dub registry wasn't directly tied to GitHub (or other similar services). It would be better if it was more difficult to remove a package from the Dub registry. With RubyGems, a package is not tied to GitHub but it's instead an artifact that has been uploaded. If the user closes the GitHub account the package will still be available in the RubyGems registry. I think it's becoming more and more problematic with the Dub being directly tied to GitHub. -- /Jacob Carlborg
Mar 17
parent reply Imperatorn <johan_forsberg_86 hotmail.com> writes:
On Wednesday, 17 March 2021 at 10:04:46 UTC, Jacob Carlborg wrote:
 On Thursday, 11 March 2021 at 22:17:59 UTC, Steven 
 Schveighoffer wrote:
 [...]
This wouldn't be a problem if the Dub registry wasn't directly tied to GitHub (or other similar services). It would be better if it was more difficult to remove a package from the Dub registry. With RubyGems, a package is not tied to GitHub but it's instead an artifact that has been uploaded. If the user closes the GitHub account the package will still be available in the RubyGems registry. I think it's becoming more and more problematic with the Dub being directly tied to GitHub. -- /Jacob Carlborg
Agreed, I've said before we should have a buffer/backup
Mar 17
parent reply WebFreak001 <d.forum webfreak.org> writes:
On Wednesday, 17 March 2021 at 10:14:39 UTC, Imperatorn wrote:
 On Wednesday, 17 March 2021 at 10:04:46 UTC, Jacob Carlborg 
 wrote:
 On Thursday, 11 March 2021 at 22:17:59 UTC, Steven 
 Schveighoffer wrote:
 [...]
This wouldn't be a problem if the Dub registry wasn't directly tied to GitHub (or other similar services). It would be better if it was more difficult to remove a package from the Dub registry. With RubyGems, a package is not tied to GitHub but it's instead an artifact that has been uploaded. If the user closes the GitHub account the package will still be available in the RubyGems registry. I think it's becoming more and more problematic with the Dub being directly tied to GitHub. -- /Jacob Carlborg
Agreed, I've said before we should have a buffer/backup
In case anyone needs it, I always have a backup of all packages so you can message me if you are missing something deleted.
Mar 17
parent Imperatorn <johan_forsberg_86 hotmail.com> writes:
On Wednesday, 17 March 2021 at 20:07:40 UTC, WebFreak001 wrote:
 On Wednesday, 17 March 2021 at 10:14:39 UTC, Imperatorn wrote:
 On Wednesday, 17 March 2021 at 10:04:46 UTC, Jacob Carlborg 
 wrote:
 [...]
Agreed, I've said before we should have a buffer/backup
In case anyone needs it, I always have a backup of all packages so you can message me if you are missing something deleted.
Splendid, that's good to know! 🍀
Mar 17