Piotr Ozarowski wrote: > Now, lets imagine this: User does not know Python and Pylons at all, he > does not follow sqlalchemy, routes, etc. mailing lists and thus will not > be aware of security bugs in these modules. He just saw an outstanding > app. on a website and decided to install it on his server. He's > regularly updating his system, because he knows that if there will be a > serious bug discovered in one of his apps or in one of dependencies - > update will be available soon. He don't need new fancy version, all he > wants is working app. Will you still recommend him to install this app. > with ez_install?
The *application* can be shipped as a package without shipping lots of individual libraries. The application package should contain all the libraries that are not already in Debian, and perhaps some of the libraries that already are in Debian if something has been inappropriately packaged. That is, there's *no* way that Mako is at a point when it should be released as a package (or quite a few of the packages used in a typical Pylons application). But an *application* can still be stable despite that, because the application only uses the areas of the library that are stable. However, you should never force newer packages to use an old version of an unstable library just because someone else used it previously; nor should you force a potentially difficult upgrade and repackaging of the application because of a library upgrade that wouldn't effect it. Users who don't know Python or Pylons don't install Python or Pylons libraries, they install applications, and those applications can and should be largely self-contained when installed. Users who do know Python and Pylons and want to hack on software shouldn't use Debian packages. -- Ian Bicking | [EMAIL PROTECTED] | http://blog.ianbicking.org --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
