4 ms·

From previous times this has come up, I was led to believe that it's not so much that the maintainers don't want namespaces as it's a thankless and overwhelming

From previous times this has come up, I was led to believe that it's not so much that the maintainers don't want namespaces as it's a thankless and overwhelming task just maintaining the status quo, and so they don't have the time and resources to implement something. Hopefully this is one of those issues that the Rust Foundation can direct some funding toward as the entire Rust community would be all the better for it.

jiggawatts 5y ago
This is passing the buck in the worst possible way. Not implementing namespaces is fantastically lazy, to the point of outright professional negligence. If you can't be bothered to lift a finger to type in the few hundred lines of code it takes to implement namespaces, then by definition you're not responsible enough to run a public package repository. Do it properly or don't do it at all.
- Shikadi 5y ago
  There's a lot more to it than a few lines of code, see: other comments on this post
  - jiggawatts 5y ago
    There really isn't, and everyone else is just making excuses. Whatever the effort level is, it is certainly much lower than the thousands of Rust users navigating a tangled mess of typo squatting, name conflicts, crate spam, and difficulty in identification of official or related crates. Again: If the crates.io team doesn't have even just this much time, then by definition they don't have the time to manage the site responsibly. They should shut it down, seek funding, or hand it over to someone else. Doing anything else is irresponsible.
    - unionpivo 5y ago
      Problem isn't creating namespaces. Problem is what happens when someone claims google, amazon, and then stars doing shady stuff with it. And maybe that somebody, was working for such organization and then left on bad terms and doesnt want to give login code or whatever. It's not that easy problem to solve, and you need to have people on standby to resolve such issues, some of which might include layers. Implementing namespaces in code are not even 10% of effort for this to work.
      - cutemonster 5y ago
        Maybe "seek funding" (like jiggawatts wrote) is a good idea? Maybe MS and other companies would want to pay for a namespaced and identity verified Crates.io -- it's in their self interest?

jiggawatts 5y ago

This is passing the buck in the worst possible way. Not implementing namespaces is fantastically lazy, to the point of outright professional negligence. If you can't be bothered to lift a finger to type in the few hundred lines of code it takes to implement namespaces, then by definition you're not responsible enough to run a public package repository. Do it properly or don't do it at all.

Shikadi 5y ago
There's a lot more to it than a few lines of code, see: other comments on this post
- jiggawatts 5y ago
  There really isn't, and everyone else is just making excuses. Whatever the effort level is, it is certainly much lower than the thousands of Rust users navigating a tangled mess of typo squatting, name conflicts, crate spam, and difficulty in identification of official or related crates. Again: If the crates.io team doesn't have even just this much time, then by definition they don't have the time to manage the site responsibly. They should shut it down, seek funding, or hand it over to someone else. Doing anything else is irresponsible.
  - unionpivo 5y ago
    Problem isn't creating namespaces. Problem is what happens when someone claims google, amazon, and then stars doing shady stuff with it. And maybe that somebody, was working for such organization and then left on bad terms and doesnt want to give login code or whatever. It's not that easy problem to solve, and you need to have people on standby to resolve such issues, some of which might include layers. Implementing namespaces in code are not even 10% of effort for this to work.
    - cutemonster 5y ago
      Maybe "seek funding" (like jiggawatts wrote) is a good idea? Maybe MS and other companies would want to pay for a namespaced and identity verified Crates.io -- it's in their self interest?