From: Tom Copeland <tom@...>
Date: 2007-01-15T03:18:02+09:00
Subject: Re: Hoe poisoned in Rubyforge

On Sun, 2007-01-14 at 20:59 +0900, Eric Hodel wrote:
> You can upload a gem of any name to any rubyforge project including  
> gems with name collisions. 

That's true.  For example, I could upload a gem called "rails-2.0.gem"
to my project "foo" on RubyForge.

However, we built various checks into the gem index builder on RubyForge
to prevent such gems from being deployed.  Perhaps there are holes in
these checks, and if so, we'll fix them.

Yours,

Tom