Bug#900286: ITP: spm -- simple password manager

[Paride Legovini]

Thanks for your feedback, Jakub, and sorry for the late reply.

On Mon, 28 May 2018 19:46:59 +0200 Jakub Wilk  wrote:
> * Paride Legovini , 2018-05-28, 17:33:
> >spm is a single fully POSIX shell compliant script
> 
> Somehow these kind of grandiose claims are never true.
> 
> This script:
> - has a shebang[0];
> - passes -G to grep (not in POSIX);
> - uses readlink(1) (not in POSIX).

Good points, I will pass them to the upstream developer.

> >Passwords are stored as GPG encrypted files with directories funtioning 
> >as (sub)groups.
> 
> Typo: funtioning -> functioning

Fixed.

> >In Debian the script will be installed as 'spm.sh'
> 
> That would be against Policy §10.4.
> Please talk to upstream about choosing a different name.

Before choosing to install spm as spm.sh I spoke with the upstream
developer. At the moment he's not willing to change the name.

Policy §10.4 says that "the script name should not include an
extension", and I interpreted that as a recommendation, not as a
requirement. By weighting the two options: deviating from upstream's
name, and not following the recommendation, I chose the latter, with the
hope to receive some feedback on the choice. Do you confirm I really
should drop the .sh and chose a different name?

Cheers,

Paride

Bug#900286: ITP: spm -- simple password manager

[Ansgar Burchardt]

On Tue, 2018-05-29 at 13:11 -0400, Nicholas D Steeves wrote:
> On Mon, May 28, 2018 at 07:46:59PM +0200, Jakub Wilk wrote:
> > * Paride Legovini , 2018-05-28, 17:33:
> > > spm is a single fully POSIX shell compliant script
> 
> [...]
> > > In Debian the script will be installed as 'spm.sh'
> > 
> > That would be against Policy §10.4.
> > Please talk to upstream about choosing a different name.
> 
> Are there any reasons why a debian/spm.install like this one wouldn't
> be an appropriate solution to §10.4?
> 
> #!/usr/bin/dh-exec
> spm.sh => /usr/bin/spm

/usr/bin/spm is already shipped by another package as noted in the
initial report.

Renaming the binary to simple-password-manager or so would probably
work.

Ansgar

Bug#900286: ITP: spm -- simple password manager

[Nicholas D Steeves]

On Mon, May 28, 2018 at 07:46:59PM +0200, Jakub Wilk wrote:
> * Paride Legovini , 2018-05-28, 17:33:
> > spm is a single fully POSIX shell compliant script
[...]
> > In Debian the script will be installed as 'spm.sh'
> 
> That would be against Policy §10.4.
> Please talk to upstream about choosing a different name.

Are there any reasons why a debian/spm.install like this one wouldn't
be an appropriate solution to §10.4?

#!/usr/bin/dh-exec
spm.sh => /usr/bin/spm

I guess it might be annoying to carry a patch for a manpage that would
effectively s/spm.sh/spm/...

Cheers,
Nicholas


signature.asc
Description: PGP signature

Bug#900286: ITP: spm -- simple password manager

[Jakub Wilk]

* Paride Legovini , 2018-05-28, 17:33:

spm is a single fully POSIX shell compliant script


Somehow these kind of grandiose claims are never true.

This script:
- has a shebang[0];
- passes -G to grep (not in POSIX);
- uses readlink(1) (not in POSIX).

But anyway, this is an implementation detail, so I don't think it 
belongs to the package description.



with basic tools such as find(1) and tree(1).


find(1) is in POSIX, so I'm not sure it was mentioned explicitly.
tree(1) is not "basic". It's obscure.

Passwords are stored as GPG encrypted files with directories funtioning 
as (sub)groups.


Typo: funtioning -> functioning


In Debian the script will be installed as 'spm.sh'


That would be against Policy §10.4.
Please talk to upstream about choosing a different name.


[0] http://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html
“If the first line of a file of shell commands starts with the 
characters "#!", the results are unspecified.”


--
Jakub Wilk

Bug#900286: ITP: spm -- simple password manager

[Paride Legovini]

Package: wnpp
Severity: wishlist
Owner: Paride Legovini 

* Package name: spm
  Version : 1.5.0
  Upstream Author : Klemens Nanni 
* URL : https://notabug.org/kl3/spm
* License : GPL-3+
  Programming Lang: sh
  Description : simple password manager

spm is a single fully POSIX shell compliant script utilizing gpg2 combination
with basic tools such as find(1) and tree(1). Passwords are stored as GPG
encrypted files with directories funtioning as (sub)groups. spm reads/writes
passwords via standard input/output allowing you to build flexible and powerful
management tools.

spm was initially inspired by pass(1). The two are still similar, but they
should not be considered compatible.

In Debian the script will be installed as 'spm.sh' to avoid a name clash
(salt-common installs /usr/bin/spm). The manpage will be patched accordingly.

This package is for people looking for a pass(1)-like tool, but who prefer a
simpler tool (spm is less than 100 SLOC) and are not interested in the extra
functionality given by the integration of pass and git. I personally use both.

The upstream author supports this packaging effort and agrees with the
spm->spm.sh rename.

Paride