hackage-security
hackage-security copied to clipboard
Hackage security framework based on TUF (The Update Framework)
See https://github.com/haskell/cabal/issues/4136 .
I wasn't sure whether to file this here or in Cabal's issue tracker, but I think this method can be generalised, so I'm documenting it here for now: `cabal-install` can't...
See https://github.com/haskell/hackage-server/issues/493 .
See also https://github.com/haskell/cabal/commit/fe7b597542d57c74814620ed7a553e252b570ac7 .
- [ ] In hackage-security: See TODO for `fileInfo`; currently we do two separate passes over the input bytestring, one to compute the length and one to compute the hash....
(if appropriate). See https://github.com/haskell/hackage-server/issues/465 .
Currently we only parse the metadata, but we could easily add some parsers for `.cabal` files and `preferred-versions` files; if we did, then we could complete the `IndexFile` definition.