From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Vasilij Schneidermann Newsgroups: gmane.emacs.devel Subject: Re: GNU ELPA package discoverability Date: Sun, 24 May 2020 15:38:33 +0200 Message-ID: <20200524133833.GB30384@odonien.localdomain> References: <4e937898-ae46-710a-cbca-e452a1156fa1@yandex.ru> <2e630dc7-ba1d-e4c9-74b3-4da976db1e82@yandex.ru> <20200522081318.GA299926@odonien.localdomain> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="GID0FwUMdk1T2AWN" Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="45668"; mail-complaints-to="usenet@ciao.gmane.io" Cc: theophilusx@gmail.com, Emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sun May 24 15:39:45 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jcqqv-000BqU-7E for ged-emacs-devel@m.gmane-mx.org; Sun, 24 May 2020 15:39:45 +0200 Original-Received: from localhost ([::1]:57016 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jcqqu-0008D6-Ai for ged-emacs-devel@m.gmane-mx.org; Sun, 24 May 2020 09:39:44 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:40370) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jcqpz-0007Np-G8 for Emacs-devel@gnu.org; Sun, 24 May 2020 09:38:47 -0400 Original-Received: from mout-p-201.mailbox.org ([2001:67c:2050::465:201]:65506) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1jcqpx-0007WV-Q2; Sun, 24 May 2020 09:38:46 -0400 Original-Received: from smtp2.mailbox.org (smtp2.mailbox.org [80.241.60.241]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by mout-p-201.mailbox.org (Postfix) with ESMTPS id 49VLsX0LXczQlBp; Sun, 24 May 2020 15:38:40 +0200 (CEST) X-Virus-Scanned: amavisd-new at heinlein-support.de Original-Received: from smtp2.mailbox.org ([80.241.60.241]) by hefe.heinlein-support.de (hefe.heinlein-support.de [91.198.250.172]) (amavisd-new, port 10030) with ESMTP id MlLTtgeka3Q9; Sun, 24 May 2020 15:38:33 +0200 (CEST) Mail-Followup-To: Richard Stallman , theophilusx@gmail.com, Emacs-devel@gnu.org Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 6AFCC1754 X-Rspamd-Score: -5.55 / 15.00 / 15.00 Received-SPF: pass client-ip=2001:67c:2050::465:201; envelope-from=mail@vasilij.de; helo=mout-p-201.mailbox.org X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:251314 Archived-At: --GID0FwUMdk1T2AWN Content-Type: text/plain; charset=utf-8 Content-Disposition: inline > Arch GNU/Linux does not face the issue of making sure that packages > don't recommend nonfree software. Indeed, it includes nonfree > programs. But that issue is part of our core goal. > We cannot follow their example into working against our principles. My explanation was solely about the technical aspects of the repositories. It goes without saying that non-free packages (that is, packages without a GPL-compatible license) are not welcome. Even MELPA switched to only allowing inclusion of free packages and went through the effort of checking each submitted package for GPL-compatibility, including removal of non-compliant ones. Additionally to this their website is fully functional when accessed in a browser with the LibreJS extension. > From that rough description of the Arch User Repository, I get the > impression it doesn't have any step at which that checking would be > done. So we would have to add that. The Arch User Repository would be the equivalent of MELPA. It is not something the FSF would be directly concerned with and merely serve as a way to gauge candidates for inclusion into the "second ELPA". > If "community-provided ELPA repositories" means those that include packages > that depend on nonfree programs, we can't "work with" that. The only thing > we can legitimately say about them is "don't go there." This point somewhat surprises me. By that logic GNU ELPA itself would be "don't go there" as it hosts the excorporate package [1] which depends on Microsoft's Exchange service, a non-free Service as a Software Substitute. Vasilij [1]: http://elpa.gnu.org/packages/excorporate.html --GID0FwUMdk1T2AWN Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEE0dAcySl3bqM8O17WFmfJg6zCifoFAl7KeNAACgkQFmfJg6zC ifrZ5AgAsoFy8zZJQH+VcT2KoLrbDiXynBBgikFFv1gafbOJ3VjQk8LpcgL5/GqI Dy3rYvEmv3rGtJibCiHRv4ghpY8QdE5LS0iTGQahvlRLfJiFvP6YENIz9X7s312l +afINTARUOsImlf47NnNyloqtEzajVmNA9TgswgEjhV4OhcmJupU5dkvvdtGoien IOkevnmD8M0qo//3gODxWX85bn1B1j/FYcY2/SpcyKVjLKdM3U//kmrGpf2bSU5A pOg3vHr/JA+kt1NRB28klBVvggv9KmrglVE/c2x/TIn3HbkYxHC8H3K36gS6Dhen cRDTeA6tkdwj3nhPrVZvqe3SlTpmjg== =olgV -----END PGP SIGNATURE----- --GID0FwUMdk1T2AWN--