[gsoc] DUB - Ideas

[Joseph Rushton Wakeling]

On Thursday, 7 March 2019 at 16:01:18 UTC, Atila Neves wrote:
> A fair point.
>
> At the time I was trying to pin the pyd version because there 
> was a bug in the dub registry that prevented me from doing so 
> in the regular fashion. Then the bug got fixed and I moved on.

It wasn't meant as a personal attack!  Sorry if it came over that 
way.

I get the motivation, but it feels somewhat dodgy to allow 
packages in the DUB repository to depend on arbitrary git forks.  
What might make more sense is to allow a way for the build call 
(or settings in `dub.selections.json`) to easily override 
dependency locations, which can be used for temporary workaround 
like this.  What do you think?

It's obviously not great if e.g. one has a library package that 
triggers a bug in one of its dependencies and has no possibility 
of an in-code workaround, but it seems more secure and consistent 
to require dependency overrides to be chosen by the user rather 
than allowed in any circumstances.