gbaz

Captcha for hackage account registration

2

The reg page is getting hit with bots (they're not confirming the account, but it is placing load we don't want on our mailing system). We should add a simple...

Further hide deprecated versions in version listing

4

An unfortunate consequence of an accidental upload of a nightly ghc lib to hackage:  It would be nice if we could set hackage to make deprecated versions much more...

User Notification emails

3

This is a mergable chunk that should almost resolve https://github.com/haskell/hackage-server/issues/230 It has machinery for user preferences for which notifications to get, but no UI or API for them yet. Also,...

Package page should give links to last working docs when new docs aren't built?

1

From reddit: "It would be better to maybe have some copy around where the links are that says "The documentation for this version isn't available; the last version with documentation...

remove cabal > 2.0 restriction on files in the 00-index file?

1

This is a pretty ancient hack and imho there's no need to support cabal 1.x any more: https://github.com/haskell/hackage-server/commit/9a6be09342095dda621c39ed3189904240a458e4

Implement PackageRank from lib.rs

3

A very impressive amount of research and thought here: https://github.com/rust-lang/rfcs/blob/master/text/1824-crates.io-default-ranking.md It would be useful to add this as an explicit metric to sort by. 🤔

move to full-text-search package.

1

@adamgundry writes (in https://github.com/haskell/hackage-server/issues/615): It might be worth switching Hackage to use the `full-text-search` package. This was derived from the Hackage search implementation (so it provides a very similar interface...

Builder for candidates still needs work

1

These lines screw things up: https://github.com/haskell/hackage-server/blob/4d6d2089d442859e3d04874a82f421cb8950eef5/exes/BuildClient.hs#L496 https://github.com/haskell/hackage-server/blob/4d6d2089d442859e3d04874a82f421cb8950eef5/exes/BuildClient.hs#L499 This looks up the package in the repoIndex. But for a candidate that _isn't_ a dup (i.e. for which that name/version pair is...

Hackage builder should timeout testing

1

As it stands, if a test suite spins forever, the general timeout brings down the builder, but it doesn't submit a failed build report, so can "latch" on that point...

Occasionally we get a hackage builder fail for reasons that don't register on the server (e.g. doc tarball is invalid for upload) and so the server-based mechanism we moved to...