Phil,
I've used scp uploads in the past. They're much easier when e.g. you wanna
upload a java library you've forked. Without scp uploads (or an easy
copy/paste curl alternative), you have to go through getting the project to
build with lein by itself. It's not *too* difficult to get a maven
I noticed 'lein deploy clojars' for SNAPSHOT is actually more convenient
than the scp upload method because, besides not needing the signing stuff,
there is no need to manually delete the .m2 cache when a new snapshot is
uploaded.
As for signing, I finally had an opportunity to do it and it
Hey Nelson,
I would love to help out with raising funds for Clojars. I've got a great
idea that I need to talk to you about. I can provide execution and
promotion.
Let's talk.
Eric
On Wednesday, October 8, 2014 7:49:38 PM UTC-5, Bridget wrote:
On Friday, September 26, 2014 11:09:55 AM
On Friday, September 26, 2014 11:09:55 AM UTC-4, Nelson Morris wrote:
Clojars has become a critical part of the clojure ecosystem. As a small
sample, it hosts artifacts for:
* Web development - ring, compojure, hoplon, hiccup, enlive, friend,
immutant
* Tooling - lein templates/plugins,
On 27 September 2014 at 09:32:13, Sean Corfield (s...@corfield.org) wrote:
If Clojars' scp remains unavailable, will that pain be sufficient
to
switch library maintainers to https deploy? Or will those maintainers
just stop making releases and abandon their libraries?
I've had to do a few
I just want to chime in to note that not everyone who works in Clojure, and for
whom Clojars is the obvious (only?) reasonable way to share libraries, is a
professional developer. Some of us are, for example, researchers or students in
a range of fields for which reading complex security stuff
Lee Spector lspec...@hampshire.edu writes:
I just want to chime in to note that not everyone who works in
Clojure, and for whom Clojars is the obvious (only?) reasonable way to
share libraries, is a professional developer. Some of us are, for
example, researchers or students in a range of
Thanks Phil. We'll definitely look into :sign-releases false when we try to
get this working next week.
-Lee
On Sep 27, 2014, at 7:52 PM, Phil Hagelberg p...@hagelb.org wrote:
Lee Spector lspec...@hampshire.edu writes:
I just want to chime in to note that not everyone who works in
I'd love to kick in a few bucks per week. Gratipay might work for you; it
doesn't skim anything after credit card fees (full disclosure, I am friends
with the person who runs it).
On Friday, September 26, 2014 3:30:29 PM UTC-4, Nelson Morris wrote:
I have no expectations for anyone. Clojars
FWIW, I followed the lein deploy clojars instructions (around March this
year) and it did work for me. I recall being a bit confused by the GPG
stuff, but following the notes on the wiki did do the trick.
Jony
On Friday, 26 September 2014 04:21:41 UTC+1, Phil Hagelberg wrote:
Carlos Fontes
Clojars has become a critical part of the clojure ecosystem. As a small
sample, it hosts artifacts for:
* Web development - ring, compojure, hoplon, hiccup, enlive, friend,
immutant
* Tooling - lein templates/plugins, cider-nrepl, clojure-complete,
gorilla-repl
* Clojurescript - lein-cljsbuild,
I'm not very familiar with Clojars so please forgive the naive question:
Why not host jar files themsevles on Maven central and Clojars becomes a
catalog of Clojure related artifacts?
On Friday, September 26, 2014 8:09:55 AM UTC-7, Nelson Morris wrote:
Clojars has become a critical part of
Many of the projects already deployed are not compatible with central's
requirements, including group-ids and signatures. There are other reasons,
but that one already makes it impossible.
On Sep 26, 2014 10:18 AM, Mark markaddle...@gmail.com wrote:
I'm not very familiar with Clojars so please
There's a number of options out there for collecting small recurring
payments. I already make regular payments to Wikipedia and a couple of
others (including GitHub), and would be willing to kick in some money
towards Clojars.
The question is: what is a reasonable amount? This is tricky; I'm
I have no expectations for anyone. Clojars has been free to use
(push/pull,individual/corp) since it started. I have no intentions of
changing that. My belief is there is value to maintenance/dev, and hope
that it can financed in a sustainable way. If it can be done by being
spread out among
Please count me in for $500 this month. Contact me off-list user d, domain
athena dot com with info where I should send money.
I ran the scala-tools.org Scala JAR repo for many years with the help of a few
other folks. I understand the challenges of running a repo... the expectation
that
I grumbled about the GPG stuff when it came up but after a chat with
Phil I decided this was something I just needed to learn as a
developer. Sure, it means you have to read complex security stuff
but we have to read lots of complex stuff as developers - that's just
part of our job.
I switched to
On 25 September 2014 at 02:57:39, Phil Hagelberg (p...@hagelb.org) wrote:
In particular we would like to know reasons why you haven't
upgraded, assuming it's not just I started on scp and it worked
well,
so I never saw the need to change anything.
FWIW, that's exactly the reason I and a few
I second Michael Klishin.
Some immemorial time ago I tried `lein deploy clojars` which lead me to
read complex security stuff. I really tried to make it work, I did.. but it
didn't just work, it didn't work with some work and even with more
work, so now I just use `lein push`.
Btw, is Clojars
Carlos Fontes ccfon...@gmail.com writes:
Some immemorial time ago I tried `lein deploy clojars` which lead me to
read complex security stuff. I really tried to make it work, I did.. but it
didn't just work, it didn't work with some work and even with more
work, so now I just use `lein
Greetings, Clojure hackers.
Due to the recent vulnerability in Bash[1], the scp-based deploy
services on clojars.org has been disabled for the time being.
If you have been using this (as opposed to the HTTPS deploy used by
`lein deploy clojars` and `maven deploy`), we'd be interested in hearing
Phil Hagelberg p...@hagelb.org writes:
Due to the recent vulnerability in Bash[1], the scp-based deploy
services on clojars.org has been disabled for the time being.
I neglected to mention here that the Clojars's susceptibility to this
vulnerability was both discovered and fixed by Nelson
22 matches
Mail list logo
