archive for tslib-0.1.4 is missing

[erantapaa]

The archive for tslib-0.1.4:

https://hackage.haskell.org/package/tslib-0.1.4/tslib-0.1.4.tar.gz

results in a "410 Gone" page.

[gbaz]

This is on purpose. It was an accidental upload of software that is not properly licensed for hackage and the archive was removed by special request.

[erantapaa]

Would it be possible to remove them from the index.tar.gz archive of cabal files?

[gbaz]

As far as I know the index.tar.gz is immutable by design, and even moreso with new hackage-security. @dcoutts can confirm. The full removal of source vs. just deprecation is very rare and we've only had to do it a few times. As far as I know this was chosen as the least bad way to do it.

[hvr]

Adding to what @gbaz says, downstream systems (including cabal-install) would be quite confused if packages started disappearing from the index, and adding support for that would make them more complicated if this invariant isn't there anymore.

On the other hand, there's the idea to add package-removal events to the index tar stream. That would be compatible with the design principles here. This was already mentioned in #436 (comment)