Bug#1040007: libwww-mechanize-perl: migrate to libhttp-cookiejar-perl?

[Steve Langasek]

Package: libwww-mechanize-perl
Version: 2.16-1
Severity: wishlist
User: ubuntu-devel at lists.ubuntu.com
Usertags: origin-ubuntu mantic

Dear maintainers,

The libwww-perl package has recently switched from depending on
libhttp-cookies-perl, to depending on libhttp-cookiejar-perl, with the
upstream rationale that this is "a safer cookie jar".

Are there any plans for libwww-mechanize-perl to also switch?

Downstream in Ubuntu, we libwww-perl, libwww-mechanize-perl, and
libhttp-cookies-perl are all in the "main" component of the archive with
different security committments than "universe" and we have a preference for
not having duplicate implementations of functionality where we can avoid it;
therefore we would prefer to replace libhttp-cookies-perl with
libhttp-cookiejar-perl in main by having both of the reverse-dependencies
updated to use the same implementation, rather than having both in main.

I also see that libwww-mechanize-perl itself depends on libwww-perl, so I
wonder what the interactions are like there if the two libraries are using
separate cookie stores?

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20230630/eb3fff11/attachment.sig>