summaryrefslogtreecommitdiff
path: root/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root/comment_1_683c5b754fd7922ff3193a2f8bc6fd2e._comment
blob: 39836219b7cdf90de583158bfe8e37d75cac5fc7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
[[!comment format=mdwn
 username="joey"
 subject="""comment 1"""
 date="2016-04-05T17:19:50Z"
 content="""
Yes, cabal is not secure from MITM.

I've rethought adding that dependency so soon. I'll change back to bundling
concurrent-output in 3.0.1. 

I can force ghc to build the concurrent-output
module with -O2 as needed to get good memory use, and still let the rest of
propellor build with -O0, which was the main motivation for unbundling it.
"""]]