[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #13166 [metrics-lib]: Release metrics-lib version 1.0.0
#13166: Release metrics-lib version 1.0.0
-------------------------+------------------------------
Reporter: karsten | Owner: karsten
Type: enhancement | Status: needs_review
Priority: Medium | Milestone:
Component: metrics-lib | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Sponsor: |
-------------------------+------------------------------
Comment (by iwakeh):
Great!
The verifying works fine.
Well, adding the external libs to the tar (and maybe also signing the
external jars) would make
explicit what external software was used. And with the hashes in the
signed jars one could verify,
if these are the same as those available from other sources, on a class
file level. That's the tin-hatty reasoning.
The second reason is convenience: I can just download the tar and have
everything - verified by the Torproject - in place for deploying
descriptor in my project and/or for starting development on it.
This is just one simple download instead of searching for the deps in the
web or adding packets to my linux system.
A tar with everything (signed class jar, sources jar, external jars) will
provide this.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13166#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs