[Koha-devel] Adopting CPAN and Carton

[Mike Lake]

Plus for Chris's view on this.

As a sys admin that maintains a Koha for an org I want to be able to 
"aptitude update/upgrade" without problems and do a future dist-upgrade 
with few problems.

Perl is pretty stable (vastly stable compared to npn packages) but there 
are occasionally patches that come through. It's preferable for a Debian 
Perl package maintainer to manage that I think.

Mike
---
Mike Lake

On 2020-06-10 17:49, Chris Cormack wrote:
> Hi all
> 
> Just want to put on record my thoughts that replacing the package
> architecture with carton or cpan seems like a bad idea. 
> The main benefit of using modules packaged and tested by debian
> developers is that is a whole lot of work we don't have to do. It
> comes under the debian perl (who have massive combined knowledge) and
> the debian security team.
> If we are going to move away from that someone is going to be needing
> to follow all the security advisories for all the perl modules we use
> (must be a hundred or so) and deal with that. It also makes OS
> udgrades harder. 
> 
> I'm not opposed to having them as an option but replacing the packages
> with them seems like a step into the utter chaos that is things like
> npm and the node world.
> 
> Chris