Re: matlab-mode MELPA, link contact FAQ?

[Steve Purcell <steve@sanityinc.com>]

> On 19 Apr 2016, at 12:29, Richard Stallman <rms@gnu.org> wrote:
> 
> http://melpa.org/ contains this Javascript code with no license
> 
>    <script type="text/javascript">!function(d,s,id){var
>      js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document,
>      'script', 'twitter-wjs');</script>

Our source code does not contain that snippet: it is inserted at runtime by https://platform.twitter.com/widgets.js. That particular 3rd-party javascript, which I am not aware to be free, can be cheerfully blocked by LibreJS without causing the site to degrade. (The same goes for Google Analytics.)


> It also loads https://fr.amiando.com/resources/js/amiandoExport.js
> which seems to be source code, with no license.

No, our site does not load that script. I suspect that this is due to a browser extension you are running — they frequently side-load further libraries.


> Those are clearly nonfree; it is no error for LibreJS to think so.
> 
> The page also loads /js/bootstrap.min.js.  I tried to fetch
> http://melpa.org/js/bootstrap.min.js but that doesn't work.
> I suppose it needs to be loaded from some other site.

No, we do not mention or attempt to load that resource. I suspect a browser extension again.


> It also loads
> http://code.jquery.com/jquery-1.10.1.min.js,
> but that is free software and no problem.

Nope, we don't load jquery either.

These points have been confirmed by auditing the code and testing in several browsers.


So with those points addressed, here's the situation re. LibreJS and the javascript we *do* use:

- We have merged some website changes which mark up all our free javascript for the convenience of LibreJS.
- LibreJS still complains about “cookies.js” because we are waiting for the maintainers to confirm permissibility of the liberal "unlicence” it uses. So far they have been unresponsive. [1]

When that LibreJS issue is cleared up, you will be able to use that extension to more reliably confirm for yourself that no non-free software is required to access melpa.org.

Regards,

Steve

[1] http://lists.gnu.org/archive/html/bug-librejs/2016-04/msg00000.html