diff options
Diffstat (limited to 'dev-haskell/hackage-security/metadata.xml')
-rw-r--r-- | dev-haskell/hackage-security/metadata.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/dev-haskell/hackage-security/metadata.xml b/dev-haskell/hackage-security/metadata.xml new file mode 100644 index 000000000000..a3594f6cd4ae --- /dev/null +++ b/dev-haskell/hackage-security/metadata.xml @@ -0,0 +1,35 @@ +<?xml version='1.0' encoding='UTF-8'?> +<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> +<pkgmetadata> + <maintainer type="project"> + <email>haskell@gentoo.org</email> + <name>Gentoo Haskell</name> + </maintainer> + <use> + <flag name="use-network-uri">Get Network.URI from the network-uri package.</flag> + </use> + <longdescription> + The hackage security library provides both server and + client utilities for securing the Hackage package server + (<http://hackage.haskell.org/>). It is based on The Update + Framework (<http://theupdateframework.com/>), a set of + recommendations developed by security researchers at + various universities in the US as well as developers on the + Tor project (<https://www.torproject.org/>). + + The current implementation supports only index signing, + thereby enabling untrusted mirrors. It does not yet provide + facilities for author package signing. + + The library has two main entry points: + "Hackage.Security.Client" is the main entry point for + clients (the typical example being @cabal@), and + "Hackage.Security.Server" is the main entry point for + servers (the typical example being @hackage-server@). + + This is a beta release. + </longdescription> + <upstream> + <remote-id type="github">well-typed/hackage-security</remote-id> + </upstream> +</pkgmetadata> |