# New Merge Policy for an always-green hydra

**URL:** https://discourse.nixos.org/t/new-merge-policy-for-an-always-green-hydra/8889
**Category:** Development
**Created:** [September 4, 2020, 7:18pm UTC](https://discourse.nixos.org/t/new-merge-policy-for-an-always-green-hydra/8889 "2020-09-04T19:18:18Z")
**Posts on this page:** 1
**Showing post:** 51

<div class="post-metadata">

### Author: ![7c6f434c](https://discourse.nixos.org/letter_avatar_proxy/v4/letter/7/8e7dd6/32.png) [@7c6f434c](https://discourse.nixos.org/u/7c6f434c)
#### Post date: [September 25, 2020, 7:19am UTC](https://discourse.nixos.org/t/new-merge-policy-for-an-always-green-hydra/8889/51 "2020-09-25T07:19:44Z")

</div>

> [@kevincox](#):
>
> I think that we should have a policy like “a package marked as broken or insecure for 90 days will be deleted”.

Just in case, I support permanently marking `ghostscript` as insecure and oppose its deletion.

(It is clearly unlikely to be safe for malicious files in forseeable future, and it is also quite a useful tool for processing files of known-benign origin)

---

_[View the full topic](https://discourse.nixos.org/t/new-merge-policy-for-an-always-green-hydra/8889)._
