DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type:content-transfer-encoding; q=dns; s=default; b=TjT
	QOZjeEulMOAuGBRr0WnrIQQ3hi/oPk1j2UqPGGOgbDyOtzeLhzMasvSLsdclKfng
	vxupWbAa0GOo8/CclVjOMMV3SZxnREa+X7SI2RB8mH5jDGXP15dxOJLAQ7Bw4KTV
	cDtS1PWgwFYr5bNrT/P4IyZH2aD5k0c2pJQ3gxRk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <518FC54E.10509@iname.com>
Date: Sun, 12 May 2013 10:37:34 -0600
From: Daniel Jensen <jensend AT iname DOT com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130307 Thunderbird/17.0.4
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: RE: Installing VIM installs lots of other stuff
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

You'll note, however, that for most distros Perl doesn't depend on 
openssl, libssp, etc.

Also, including extra optional stuff as dependencies is considerably 
more acceptable when you're installing a primary OS. We expect a Fedora 
or Arch install to need 10GB and daily security updates. That's the 
unfortunate reality of linux today. For cygwin, on the other hand, 
people's expectations are different. A lot of people want cygwin to act 
like "unxutils on steroids" and just give them some basic functionality 
to supplement Windows. Not everybody is trying to make KDE on Cygwin-X 
their primary desktop.

Last year I complained when libcurl suddenly started pulling in the 
entire kerberos stack (9 packages), presumably due to changing the 
compile time option to include it. Yaakov dismissed my complaint as 
irrelevant because disk space is cheap. I didn't feel like arguing the 
point then, but the only thing I think of when I hear "kerberos" is the 
many many high-publicity vulnerabilities in the kerberos stack over the 
years. If you're putting cygwin on a bunch of machines just to ensure 
they all have access to a few basic utilities, keeping update worries to 
a minimum would be nice.

I know that for a lot of packages the packagers will have legitimate 
reasons to decide that some users' desire for increased functionality 
overrides other users' desires for a small, possibly even portable, 
cygwin install with minimal update needs. Such is life. But please don't 
just completely dismiss the latter group of users' concerns as irrelevant.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple