Re: Putting security information in pkgsrc itself

[David Brownlee <abs%absd.org@localhost>]

On Tue, 26 Sept 2023 at 12:21, Thomas Klausner <wiz%netbsd.org@localhost> wrote:
>
> Hi!
>
> Currently, the source files for pkg-vulnerabilities and eol-packages
> live in a non-public repository.
>
> I don't think this is really necessary and would put them into
> pkgsrc/doc instead.
>
> The interface for the end-users (pkg_admin) uses copies of the files
> uploaded to ftp.NetBSD.org - this would not change.
>
> Does anyone see a problem with that?

Might have a little bit of inclination to put them in a more specific
directory, but only if there is sensible prior-art in naming such in
other packages, otherwise maybe a subdir of doc/?

Either way, very much in favour

David