dakkar

• Website: www.thenautilus.net/
• About: Long-time Perler, I even get paid to program in it.

Recent Actions

• Commented on Signing CPAN Releases with SigStore
  nice! it says it uses OIDC to authenticate users, but also that it only works with google, microsoft, and github so… is there no way to use my own OIDC identity provider? do we want to be tied to google...
• Commented on Switch lots of things on at once
  I like this pattern so much, that some time ago I release a library to make it easier: Code::Style::Kit It's essentially the same thing you're describing, but as re-usable components. As an intermediate step, import::into hides the different ways of...
• Commented on I think subroutine signatures don't need arguments count checking
  If you don't want the runtime to check for argument count, you can say: sub foo($x,$y,@) { ... } and the "too many arguments" check won't be compiled (I just checked with B::Concise)....
• Commented on A small puzzle for you
  #!/usr/bin/env perl use strict; use warnings; use List::AllUtils 'uniq'; use Data::Printer; sub align { my @all_values = sort(uniq(map {@$_} @_)); for my $param (@_) { my %hash;@hash{@$param}=@$param; @$param = @hash{@all_values}; } return; } my @a = ( 'b', 'c',...
• Commented on I hate Dist::Zilla and missing Makefile.PL
  Yep. That's why I use the Git::CommitBuild plugin, to give you both https://github.com/dakkar/Net-Stomp-MooseHelpers/tree/v2.1-dzilla (what I write) and https://github.com/dakkar/Net-Stomp-MooseHelpers/tree/v2.1 (what you can use without dzil). This way, anyone can send me patches for whichever version they're most confortable with, and I...
• Commented on Keeping a Reasonable Number of Incremental Backups
  That looks very much like http://www.rsnapshot.org/ I've been using it for years and it's very very simple....
• Commented on I try postderef and key-value slice in Perl 5.19.5
  That's not the way ->%{} is supposed to work. $a->%{foo} returns foo => $a->{foo}, and you can't assign to such a thing. You probably meant $new_params->@{'FOO', 'BAR'} = $params->@{'foo', 'bar'};, which does the assignment you're looking for....
• Commented on A feed reader
  It would not be particularly complicated to get Feeder to send email instead of writing to a maildir: you just write a role to do that. It would be like Feed::Role::MailDir, but instead of using Maildir::Lite, it would directly send...

Comment Threads

• Timothy Legge commented on Signing CPAN Releases with SigStore

  Grinnz in addition, all cosign signatures are added to the append-only transparency log:

  I grabbed the SHA256 from the CHECKSUMS file on cpan and queried:

  https://search.sigstore.dev/?hash=9b8582e5ad8b56093bc1d6f59888333af3c3615f9dde989e5b56f6a1ad3b2627

  It shows the entry for the release version 0.04 that I released earlier today.

  So in addition to verifying the signature you can verify when it was added to the log.

• Timothy Legge commented on Signing CPAN Releases with SigStore

  At present PAUSE has no way to validate that I am the timlegge@....com that uploaded those files.

  PAUSE does have my "private email" which happens to be the one that I used so it could verify that the signature is from that email identity but it does not have a concept of identity provider.

• Grinnz commented on Signing CPAN Releases with SigStore

  If PAUSE could provide (pardon the pun) an identity provider service that this could utilize, that seems like it would make a nice closed loop of trust. PAUSE mostly only gets significant overhauls at a PTS though :)

• Ranguard commented on Signing CPAN Releases with SigStore

  Nice!

• Dean commented on Signing CPAN Releases with SigStore

  This discussion seems healthy and there appears to be alot of alignment already.