[R-pkg-devel] Logical Inconsistency of check regarding URL?

Dr. habil. Michael Thrun m@thrun @end|ng |rom gmx@net
Tue Nov 29 08:19:40 CET 2022


Dear All,
I got from Uwe the following message after uploading an update of my package “DatabionicSwarm”.  "Found the  following (possibly) invalid URLs: URL:  https://www.deepbionics.org (moved to  https://mthrun.github.io/index) From: DESCRIPTION Status: 301 Message: Moved Permanently
Please change http --> https, add trailing slashes, or follow moved content as appropriate.
"
 I asked then
"
Dear Uwe,
your request states to either
Please  change http --> https, add trailing slashes or to  follow moved content as appropriate.
As it is not  appropriate to follow content, I select the first   choice. the URL is 
"https://www.deepbionics.org/" 
 which mets both conditions of beeing "https" and 
 having at the end one "/".
What is the problem?  Please elaborate.
You already accepted another  package GeneralizedUmatrix today with exactly same 
 url. I really dont understand it. Please be so kind 
 to elabore.”

 As an answer I got
"You are abusig the system! Again: <Followed by same Message as above>”

Hence, I have several questions.
First, do we not communicate with CRAN anymore through the submission procedure of the package? If not, which is the correct line of communication in such a case?

Second, are the answers that we get now fully automatically generated? It would be strange for me to believe that Uwe would provide such an answer to my polite request.

Third, why can I have a CRAN package "DataVisualizations" with this URL online, another one named "GeneralizedUmatrix" uploaded the same day with the same URL, which both are OK, but the URL in "DatabionicSwarm" is not?

Forth, can't we have more clear feedback messages?
I mean, having in the description the URL "https://www.deepbionics.org/" and getting the feedback "http --> https, add trailing slashes or ... "does not make any sense. Also, could someone please explain why is a "/" at the end of an URL necessary? What is the technical background to this?

Fifth, why do we need https/TLS/SSL? I have to pay a monthly fee for a certificate to apply this to my website so that CRAN accepts my URL - and as far as I can tell, it makes things only more complex but not more secure (e.g., https://www.elektronik-kompendium.de/sites/net/1906041.htm). Or in other words, it seems to me that we are expected to pay to follow the guideline of having a certificate instead of making better code with fewer bugs. I am no security expert, but my baseline in computer science is always if a tool is more complex, then the chances are lower that it works as intended, and the possibilities are higher that it has unintended and potentially risky side effects.    

Best Regards

Michael
 


More information about the R-package-devel mailing list