The Bad

• Written in Haskell, which sometimes causes problems with installation.
• No crypto checksum on the tree, and no crypto signatures except on the transport
• Uses timestamps to detect file modifications (though can be turned off with a flag)
• Patches can be commuted, making it difficult to get the exact state of a tree at a particular time unless you know that you will need it in the future.