[Mono-dev] [mono-packagers] mono-find-(provides|requires)

[Andrew Jorgensen]

On Fri, 2008-12-12 at 16:28 +0000, Jo Shields wrote:
> 1) Why does mojoportal provide mono(log4net)? If it's a private bundled
> lib which is not added to the GAC, then why lie and say it's provided
> when it isn't?
> 
> If something isn't hitting the GAC, don't say you provide it, because
> you simply don't. If you need to depend on a specific non-GAC app, then
> depend on that app - don't muck about with putting things where they
> don't belong, or with badly formed automatic dependency. Just say "I
> require monodevelop, y'all"

Trouble is that it's not easy to determine if a required assembly will
be found in the gac or in some other location.

> 2) Why does mojoportal even bundle that lib? Every bundled lib is a
> security liability. If you didn't have ten copies of every lib across
> ten different packages, you wouldn't have a problem.

There are many good reasons for an app to bundle it's own dependencies.
There are also many problems with that approach.  Rather than discuss it
I accept it as a reality.