From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Steve Purcell Newsgroups: gmane.emacs.devel Subject: Re: matlab-mode MELPA, link contact FAQ? Date: Tue, 19 Apr 2016 20:23:34 +1200 Message-ID: <28208CD0-1539-4477-919F-2E4F25086BC0@sanityinc.com> References: <87inzjw6fv.fsf@mat.ucm.es> <8737qj8feq.fsf@petton.fr> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: ger.gmane.org 1461054289 14458 80.91.229.3 (19 Apr 2016 08:24:49 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 19 Apr 2016 08:24:49 +0000 (UTC) To: rms@gnu.org, emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Apr 19 10:24:37 2016 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1asQxY-00029h-3p for ged-emacs-devel@m.gmane.org; Tue, 19 Apr 2016 10:24:36 +0200 Original-Received: from localhost ([::1]:53723 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1asQxX-0003QQ-Bv for ged-emacs-devel@m.gmane.org; Tue, 19 Apr 2016 04:24:35 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:34487) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1asQxI-0003No-SP for emacs-devel@gnu.org; Tue, 19 Apr 2016 04:24:22 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1asQxE-0002qD-Nw for emacs-devel@gnu.org; Tue, 19 Apr 2016 04:24:20 -0400 Original-Received: from purcellpeople.com ([85.214.32.38]:54220 helo=h1189701.stratoserver.net) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1asQxE-0002pd-GW; Tue, 19 Apr 2016 04:24:16 -0400 Original-Received: from [192.168.0.10] (unknown [210.54.38.21]) by h1189701.stratoserver.net (Postfix) with ESMTPSA id CD02527AC0B3; Tue, 19 Apr 2016 10:23:39 +0200 (CEST) In-Reply-To: X-Mailer: Apple Mail (2.3124) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 85.214.32.38 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:203088 Archived-At: > On 19 Apr 2016, at 12:29, Richard Stallman wrote: >=20 > http://melpa.org/ contains this Javascript code with no license >=20 > Our source code does not contain that snippet: it is inserted at runtime = by https://platform.twitter.com/widgets.js. That particular 3rd-party = javascript, which I am not aware to be free, can be cheerfully blocked = by LibreJS without causing the site to degrade. (The same goes for = Google Analytics.) > It also loads https://fr.amiando.com/resources/js/amiandoExport.js > which seems to be source code, with no license. No, our site does not load that script. I suspect that this is due to a = browser extension you are running =E2=80=94 they frequently side-load = further libraries. > Those are clearly nonfree; it is no error for LibreJS to think so. >=20 > The page also loads /js/bootstrap.min.js. I tried to fetch > http://melpa.org/js/bootstrap.min.js but that doesn't work. > I suppose it needs to be loaded from some other site. No, we do not mention or attempt to load that resource. I suspect a = browser extension again. > It also loads > http://code.jquery.com/jquery-1.10.1.min.js, > but that is free software and no problem. Nope, we don't load jquery either. These points have been confirmed by auditing the code and testing in = several browsers. So with those points addressed, here's the situation re. LibreJS and the = javascript we *do* use: - We have merged some website changes which mark up all our free = javascript for the convenience of LibreJS. - LibreJS still complains about =E2=80=9Ccookies.js=E2=80=9D because we = are waiting for the maintainers to confirm permissibility of the liberal = "unlicence=E2=80=9D it uses. So far they have been unresponsive. [1] When that LibreJS issue is cleared up, you will be able to use that = extension to more reliably confirm for yourself that no non-free = software is required to access melpa.org. Regards, Steve [1] http://lists.gnu.org/archive/html/bug-librejs/2016-04/msg00000.html