ajorgensen at novell.com
Fri Dec 12 15:49:25 EST 2008
On Fri, 2008-12-12 at 16:28 +0000, Jo Shields wrote:
> 1) Why does mojoportal provide mono(log4net)? If it's a private bundled
> lib which is not added to the GAC, then why lie and say it's provided
> when it isn't?
> If something isn't hitting the GAC, don't say you provide it, because
> you simply don't. If you need to depend on a specific non-GAC app, then
> depend on that app - don't muck about with putting things where they
> don't belong, or with badly formed automatic dependency. Just say "I
> require monodevelop, y'all"
Trouble is that it's not easy to determine if a required assembly will
be found in the gac or in some other location.
> 2) Why does mojoportal even bundle that lib? Every bundled lib is a
> security liability. If you didn't have ten copies of every lib across
> ten different packages, you wouldn't have a problem.
There are many good reasons for an app to bundle it's own dependencies.
There are also many problems with that approach. Rather than discuss it
I accept it as a reality.
More information about the mono-packagers-list