Re: luarocks lpeg rockspec + https (Re: hosting lua.org)

[nobody <nobody+lua-list@...>]

On 2023-08-23 10:07, Pierre Chapuis wrote:
> Not sure what you mean re. HTTP here. All official LuaRocks mirrors use
> HTTPS and have for a long time now.

The lpeg rockspec (e.g. 
https://luarocks.org/manifests/gvvaughan/lpeg-1.0.2-1.rockspec) says

    source = {
       url = 'http://www.inf.puc-rio.br/~roberto/lpeg/lpeg-1.0.2.tar.gz',
       md5 = 'd342571886f1abcb7afe6a83d024d583',
    }

but looking closer, the source appears to be bundled in the .rock and 
isn't fetched separately, so it appears this doesn't really matter and 
it's actually fine.

So, thanks & sorry for the noise.
-- nobody