What if someone liberated his Perl modules?
There is a recent event where a Node.js developer decided to unpublish all of his 250 or so modules on npmjs.org (including some very popular modules, causing large breakage) following a corporate takedown notice for one of his modules. The ensuing HN discussion thread highlights a security issue where a malicious author could upload a malicious update to a previously existing (but then unpublished) module. I'm wondering how such issue is handled in the Perl (CPAN) community.
Calling deleting/removing your modules "liberation" is clownshoes; ok the guy called it that, but you're not that guy right? :P
CPAN/PAUSE is first come first serve
Once you register a namespace it is yours, even if you delete all releases, all other uploaders are "unauthorized"
It takes human intervention to make someone elses upload "authorized"
See http://pause.perl.org/pause/query?ACTION=pause_04about#takeover
I didn't read the rest of your post
In reply to Re: What if someone deleted his Perl modules? (cpan/pause unauthorized)
by Anonymous Monk
in thread What if someone liberated his Perl modules?
by perlancar
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |