Some modules unexpectedly showing up as unauthorized

[pghmcfc]

Some of the latest releases of dists that I'm interested in have their 'authorized' fields as "false" for no obvious reason (no big red UNAUTHORIZED flags showing up on the search.cpan.org entry for the dists).

Ones I've noticed are:

• AnyEvent-7.07
• Carp-Clan-6.04
• Convert-BinHex-1.123
• Crypt-DSA-1.17
• Devel-Caller-2.06
• IO-Multiplex-1.13
• Math-Calc-Units-1.07
• Module-ExtractNamespaces-1.02
• Module-Extract-VERSION-1.01
• Spiffy-0.31
• Types-Serialiser-1.0

I could understand some of them possibly being race conditions between a new maintainer uploading a release and their permissions being updated, but in the case of AnyEvent for instance, it's been the same maintainer all the time and there are older releases that are authorized.

[rwstauner]

Thanks, this is a good list.
I reindexed them all.

Still unauthorized:

• STEPHEN/Convert-BinHex-1.123.tar.gz
• MLEHMANN/Types-Serialiser-1.0.tar.gz
• ADAMK/Crypt-DSA-1.17.tar.gz
• SFINK/Math-Calc-Units-1.07.tar.gz
• BDFOY/Module-Extract-VERSION-1.01.tar.gz
• MARKOV/IO-Multiplex-1.13.tar.gz

Now authorized:

• RCLAMP/Devel-Caller-2.06.tar.gz
• STBEY/Carp-Clan-6.04.tar.gz
• MLEHMANN/AnyEvent-7.07.tar.gz
• INGY/Spiffy-0.31.tar.gz

I looked at a few of them:
AnyEvent was marked as providing DB. This is a bug that we fixed in the indexer, so it only requires reindexing.
It was likely the same for the others.

The still unauthorized ones have other issues...
For example, Types::Serialiser appears to be providing JSON::PP::Boolean.
The issue I need to hunt down is why that doesn't appear in the "provides" list... something isn't consistent there.

Additionally Convert-BinHex provides a number of packages that are unauthorized:

Convert::BinHex,ERYQ,c
Convert::BinHex,STEPHEN,m
Convert::BinHex::Bin2Hex,ERYQ,f
Convert::BinHex::Fork,ERYQ,f
Convert::BinHex::Hex2Bin,ERYQ,f
Convert::BinHex::IO_Handle,ERYQ,f
Convert::BinHex::IO_Scalar,ERYQ,f

However I'm not sure why those aren't attributed to the release so that you could see why the release is marked as unauthorized.

So there are definitely still some bugs remaining.
Thanks for reporting.

[kentfredric]

Still unauthorized.

https://metacpan.org/release/RJBS/if-0.0606

module	userid	type	owner
if	ILYAZ	co-maint	P5P
if	P5P	first-come	P5P
if	RJBS	co-maint	P5P

[ppisar]

MetaCPAN thinks DateTime-Format-IBeat is not authorized because of DateTime::Format::IBeat. But all the releases were always made by SPOON.