On Tue, Jun 23, 2015 at 8:38 AM, Pierre-Yves Chibon <pingou(a)pingoured.fr>
wrote:
In which case we're ending up with no way of knowing which
version of
0.0.1 we
built since upstream may tag it multiple times (and people do!).
People can do all kinds of things not only in Git, but other VCS platforms
to
cause mischief. Once you tag something, you shouldn't change it. It just
isn't a good practice, especially if you're creating a package for
distribution.
Nothing is preventing someone from changing an archive and using the same
name.
If I was working on a package with upstream
and found that they were abusing tags, I'd point out to them why they
shouldn't be
doing that. I've found that when you explain something, most people get it.
Regarding the packaging guidelines, I've put together a draft revision of
the SourceURL
document that I plan to submit to FPC.
You can review it here:
https://fedoraproject.org/wiki/User:Gbcox/PackagingDrafts/SourceURL