[gsoc] DUB - Ideas

[Atila Neves]

On Sunday, 17 March 2019 at 13:54:54 UTC, Joseph Rushton Wakeling 
wrote:
> On Thursday, 7 March 2019 at 16:01:18 UTC, Atila Neves wrote:
>> A fair point.
>>
>> At the time I was trying to pin the pyd version because there 
>> was a bug in the dub registry that prevented me from doing so 
>> in the regular fashion. Then the bug got fixed and I moved on.
>
> It wasn't meant as a personal attack!  Sorry if it came over 
> that way.
>
> I get the motivation, but it feels somewhat dodgy to allow 
> packages in the DUB repository to depend on arbitrary git 
> forks.  What might make more sense is to allow a way for the 
> build call (or settings in `dub.selections.json`) to easily 
> override dependency locations, which can be used for temporary 
> workaround like this.  What do you think?
>
> It's obviously not great if e.g. one has a library package that 
> triggers a bug in one of its dependencies and has no 
> possibility of an in-code workaround, but it seems more secure 
> and consistent to require dependency overrides to be chosen by 
> the user rather than allowed in any circumstances.

One can already override locations in dub.selections.json, the 
problem there is automating it so downstream users don't have to 
do anything.

The whole thing was just a workaround for a dub registry bug that 
got fixed anyway, so I don't think it's too important going 
forward.