I'd like to remove www/ruby-rails and dependencies from the ports tree.
These ports haven't been maintained and have been subject to numerous
security issues over the past couple years (including a very critical
one that made the news this week).  I don't think it makes sense for us
to maintain ports for these ruby gems as:

1) All of the ports are pure ruby gems, so they don't need to be
recompiled when the system updates.

2) None of the ports requires patching to run on OpenBSD.

3) There is very little benefit to having them as ports, since
installing them via "gem install" has basically the same effect.

Rails 3.0 is no longer supported by the Rails team, and updating
Rails requires the addition of numerous dependencies and in general
a lot of churn in the ports system.

The only non-rails ports that depend on the rails-ports are
databases/ruby-couch_potato and devel/ruby-paper_trail, both of
which satisfy criteria 1-3.

textproc/ruby-haml also depends on rails, but only for regress. It's
out of date and I have a patch that brings it up to date and
removes the regress parts that depend on rails.

These are the ports I would like to remove:

databases/ruby-activerecord
databases/ruby-arel
databases/ruby-couch_potato
devel/ruby-actionpack
devel/ruby-activemodel
devel/ruby-activesupport
devel/ruby-hike
devel/ruby-i18n
devel/ruby-paper_trail
devel/ruby-sprockets
devel/ruby-tzinfo
mail/ruby-actionmailer
sysutils/ruby-thor
textproc/ruby-erubis
www/ruby-activeresource
www/ruby-rack-cache
www/ruby-rack-mount
www/ruby-rack-ssl
www/ruby-rails
www/ruby-railties

I will be preparing and testing a removal diff for these ports.  If
you have any objections to these ports being removed, please speak
up.

Thanks,
Jeremy

Reply via email to