From: Eric Hodel <drbrain@...7.net>
Date: 2007-07-25T14:48:56+09:00
Subject: Re: Import gem to Ruby 1.9

On Jul 24, 2007, at 20:15, NAKAMURA, Hiroshi wrote:

> This mail is for the topic
> '5. Where's the global repository for bundled rubygems?'
>
> Eric Hodel wrote:
> >> 5. Where's the global repository for bundled rubygems?
> >>    Of course RubyForge should be pointed.
> >>
> >>   - we need some 'rather official' repository at www.ruby- 
> lang.org, too.
> >>   - RubyForge plus its mirrors are sufficient.
> >
> > Could we make gems.ruby-lang.org a CNAME for gems.rubyforge.org?  Or
> > vice-versa?
>
> Matz, shugo, what do you think?
>
> And I should write the reason why I add '- we need some 'rather
> official' repository at www.ruby-lang.org, too.' line;
>
> When we unbundle some libraries which are bundled with ruby-1.8.X such
> as tk, WEBrick or rss, Matz (and core developers) may think they  
> want to
> treat these gems as 'rather official' than gems in gems.rubyforge.org.
>  Note that it's only my thought.  Matz said nothing about it as far  
> as I
> know.
>
> Matz once allowed (perhaps 'just did not forbid' is correct) these  
> libs
> to be called 'standard library', 'std-lib' in ruby-1.8.X. (I always
> write "bundled" instead of "standard" though)  So there can be an
> opinion to create 'rather official' repository I though.  It also will
> help other package managers (deb, rpm, etc) to decide what gems should
> be packaged with ruby itself.

Oh! I understand now.  I agree with you.  There is no need to merge a  
ruby-lang.org repository with gems.rubyforge.org.  They can and  
should stand separate.

> I just raised this opinion for discussion.  And current RubyGems  
> should
> not have such a feature to distinguish two repositories (right?) so it
> can't be actualized.  (and unbundled soap4r gem will completely live
> with gems.rubyforge.org :-)

RubyGems does have the ability to fetch gems from multiple  
repositories.  These can be managed with `gem sources`.  An example  
third-party repository is http://code.whytheluckystiff.net/ (http:// 
code.whytheluckystiff.net/yaml has the index of gems).

There is no ordering of repositories, so you can't say which  
repository gets picked first.  This should be fixed to prevent  
poisoning users with malicious packages.

--
Poor workers blame their tools. Good workers build better tools. The
best workers get their tools to do the work for them. -- Syndicate Wars