search

nix-community / nixpkgs-update

Updating nixpkgs packages since 2018
Creative Commons Zero v1.0 Universal
417 stars 69 forks source link

Remove vendor dependency `hex` #168

Open bhipple opened 4 years ago

bhipple commented 4 years ago

This package was last updated in 2009, and no longer works on GHC 8.8, as we can see by HVR's hackage revision: https://hackage.haskell.org/package/hex-0.1.2

The package is relatively trivial, but it does not appear to have a src repo anywhere. Given that it's clearly been dead for more than a decade, let's see if we can remove the dependency altogether, as it's blocking an upgrade to newer Haskell package sets.

A newer alternative is Data.HexString: https://github.com/solatis/haskell-hexstring

We use this in only one file, src/NVD.hs for the command update-vulnerability-db.

bhipple commented 4 years ago

This was done by vendoring an updated fork of hex.

ryantm commented 4 years ago

I'd prefer to remove this vendor dep. I'd like to investigate using Data.HexString later.