Robert Rothenberg

There are various CVEs for embedded libraries

4

The version of zlib seems to be affected by CVE-2018-25032 The version of http-parser seems to be affected by CVE-2019-9900

[Perl] Dancer is not the only Perl framework

1

There are many web frameworks in Perl, e.g. some of the common ones - Web::Simple - Web::Machine - Catalyst - Mojolicious - Ox A lot of them use Plack/PSGI underneath,...

[Documentation] SameSite cookies is no longer experimental

6

* Mojolicious version: 9.21 * Perl version: N/A * Operating system: N/A ### Steps to reproduce the behavior The documentation Mojolicious::Sessions for samesite states that > Note that this attribute...

Allow cron to update existing cron entries

4

To change a cron entry, it first needs to be marked absent, changed, and then re-run. What Ansible and Puppet do is prepend a comment that they use to identify...

notify task does not work

2

It would make sense to be able to use notify task => "task_name"; but this does not seem to work.

mozjpeg removes EXIF/ITPC data from PNG files

1

I've run the mozjpeg build from the master branch, with PNG support enabled. It appears to remove IPTC data from PNG files.

[RFE] Flag security issues from CPAN::Audit

2

If a module version is flagged by [CPAN::Audit](https://metacpan.org/pod/CPAN::Audit), then it might be helpful to see something in the UI for a module to indicate that it might have security issues,...

[RFE] Minify/Compact HTML to reduce bandwidth usage

4

The HTML produced by MetaCPAN is indented, which adds to the bandwidth usage of the site. You may want to consider using something like [Plack::Middleware::Text::Minify](https://metacpan.org/pod/Plack::Middleware::Text::Minify) which removes HTML indentation on-the-fly....

Perl::Critic::Policy::Subroutines::ProhibitExplicitReturnUndef can be a bad idea

11

A common example is using the return value in a list as a hash value, ```perl sub foo { my $x = shift; if ($x) { return $x; } else...

If authors could upload their public keys, then that would make it easier for users of Module::Signature to retrieve the author's keys to check signatures. See also #252