Daniel P. Berrangé <berra...@redhat.com> [2019-09-27, 01:52PM +0100]:
> +package main
> +
> +import (
> +     "flag"
> +     "fmt"
> +     "github.com/spf13/pflag"

I don't like external dependencies like this at all. Not from a
administrative POV (there are likely a number of build environments,
including ours, that want to build libvirt offline) and not from a
security POV (this reminds me of the npm-debacles we see every now and
then).

> +     "io/ioutil"
> +     vl "libvirt.org/host-validate/pkg"
> +     "os"
> +     "path/filepath"
> +     "strings"
> +)

Attachment: signature.asc
Description: PGP signature

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list

Reply via email to