Re: Bulk packages and security updates

[Greg Troxel <gdt%lexort.com@localhost>]

John Klos <john%klos.com@localhost> writes:

>>> Oh - I'd never presume to delete anyone else's and would leave that to
>>> others (builders, core, whomever).
>>
>> Well, I meant even if you are providing a pbulk and the package is on
>> the ftp site, then it shouldn't get removed because of security
>> concerns.  At least that's my take on our norms, in that I have never
>> noticed it happening.
>
> I only remove packages for security issues when new, updated ones have
> been made and uploaded.

I don't think we should do that, unless we remove all packages for which
there is an updated version, for any kind of bugfix.  Basically if we
are trying to deny code to someone because of a security concern, I
think we're doing it wrong.