From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: =?utf-8?Q?Bj=C3=B6rn?= Bidar Newsgroups: gmane.emacs.devel Subject: Re: feature/package-vc has been merged Date: Sun, 13 Nov 2022 16:34:18 +0200 Message-ID: <87pmdqudn9.fsf@thaodan.de> References: <164484721900.31751.1453162457552427931@vcs2.savannah.gnu.org> <874jvcowzm.fsf@posteo.net> <83y1soypvx.fsf@gnu.org> <87y1song5x.fsf@posteo.net> <83v8nsyof7.fsf@gnu.org> <87leoond7l.fsf@posteo.net> <87pmdxgptl.fsf@posteo.net> <87iljotycc.fsf@thaodan.de> <87k044fvx9.fsf@posteo.net> <87a650twv7.fsf@thaodan.de> <87wn84ednr.fsf@posteo.net> <87y1sks82p.fsf@thaodan.de> <87mt909g3o.fsf@posteo.net> <87leojswzm.fsf@thaodan.de> <875yfluy99.fsf@thaodan.de> <875yfk1uqm.fsf@posteo.net> <87y1sg5ntn.fsf@thaodan.de> <87cz9sz3ym.fsf@posteo.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="18914"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Cc: Richard Stallman , stefankangas@gmail.com, monnier@iro.umontreal.ca, eliz@gnu.org, emacs-devel@gnu.org To: Philip Kaludercic Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sun Nov 13 19:07:16 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ouHNx-0004fx-Q1 for ged-emacs-devel@m.gmane-mx.org; Sun, 13 Nov 2022 19:07:13 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ouHNh-0002xQ-5P; Sun, 13 Nov 2022 13:06:57 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ouE46-0008B7-3N for emacs-devel@gnu.org; Sun, 13 Nov 2022 09:34:30 -0500 Original-Received: from thaodan.de ([2a03:4000:4f:f15::1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ouE42-0007Kq-Gw; Sun, 13 Nov 2022 09:34:29 -0500 Original-Received: from odin (dsl-trebng12-b04885-76.dhcp.inet.fi [176.72.133.76]) by thaodan.de (Postfix) with ESMTPSA id A961FD08D42; Sun, 13 Nov 2022 16:34:19 +0200 (EET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=thaodan.de; s=mail; t=1668350059; bh=+LeVJ4wDC8jrTxErHpc7tH41P7SXvAQ6uShcUrDXy0s=; h=From:To:Cc:Subject:In-Reply-To:References:Date; b=MuggWGdsBk63WThaVRxtWp2KdUxW4g/wIoi+uu5uYAaG/7+RbjKO1l+XuOcIqptlG KerYx31wgvBxt8HbgO5yLaZEmE2itJ/cyFBjMzCvNRS8ZJl9kZZmowNq7Rb58TXtZ5 rjTP4ZuS3k7cZWH4AaIbWVmg2f+P/V9jFqoA5huQuXLMuq5KN1YH6D2gsDzJ8PFCGw gP9EevLGvP810k7qjO9qu39Y6fysmjnF81oGx4Cem8fukN9rz3pLL80rvJJGs4IF02 yNgmzBrOcDoFZ5RNq6wEQq6xSgHPQhYXfw2TpFmm2ZxV2bPQL0uXgM7qvZ79psnDBC NNk+OFTq2uVcwlnBC+XTFGR7zRuM4bxepU56lqp0Lr1zdmXXqTG9ceqD7ruGt1/ST4 5oRgVAO/HvuLje3HXsFAWAuCWlFO8ToMkCEPhIBaDJvhq4Z5xufHT8yYW6enDuR1av oGFp30J/ekqJGWUS15+0b+9k69ikGJOLJ8JA9KUC2EySzBbMRAvwVD9QxCKFYkyZA2 umdjy2sXyVp1zcatqJHV50KWega2y6zHpDe3egSrcPC2a+Sjs5areKvlktlX9usW3b Gv3rlDeI3Jgayvn88oNQAmLzY3Cf+ula4DTtmnz1+F3PU9vO0oUE0W0g9Yxg6ni32M mqRwgWpzINyD0HCLxqVKtV2g= In-Reply-To: <87cz9sz3ym.fsf@posteo.net> (Philip Kaludercic's message of "Sat, 12 Nov 2022 13:40:01 +0000") Received-SPF: pass client-ip=2a03:4000:4f:f15::1; envelope-from=bjorn.bidar@thaodan.de; helo=thaodan.de X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Mailman-Approved-At: Sun, 13 Nov 2022 13:06:52 -0500 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.devel:299737 Archived-At: Philip Kaludercic writes: > Bj=C3=B6rn Bidar writes: > >> Philip Kaludercic writes: >> >>> Bj=C3=B6rn Bidar writes: >>> >>>> Richard Stallman writes: >>>> >>>>> [[[ To any NSA and FBI agents reading my email: please consider ]]] >>>>> [[[ whether defending the US Constitution against all enemies, ]]] >>>>> [[[ foreign or domestic, requires you to follow Snowden's example. ]]] >>>>> >>>>> Please do not encourage people to load packages from MELPA. MELPA >>>>> does not cooperate with us. Not in legal matters, not in ethical >>>>> matters, and not in technical matters of development. >>>> >>>> What justifies this kind of gaslighting against Melpa?=20 >>> >>> Wikipedia defines gaslighting as: >>> >>> Gaslighting is a colloquialism, loosely defined as manipulating >>> someone so as to make them question their own reality [...] >>> >>> so I am not sure how this applies to this thread. >> >> I'm sorry but English isn't my mother tongue.. From my pov he wrote >> misleading statements about Melpa which did sound like gaslighting to me. > > Forgive me for guessing, but could your native language be German? I'm > just inferring from the name. If so, what did you want to say? > Vielleicht verstehe ich so besser was du meinst? Ja meine Muttersprache ist Deutsch, vielleicht geht es besser so. Ich habe es so verstanden das man Melpa nicht nennen sollte weil Melpa nicht kooperiert mit Gnu, was meiner Meinung nach nicht war ist bzw. mir neu w=C3=A4re.=20 Beide Quellen enhalten die nicht freie Software verwenden (Melpa: Lastpass, Elpa Excange support). Dadurch f=C3=A4llt mir als einziger Unterschied Github bzw. Forge basierte Entwicklung und Mailinglisten basiertes Model. OT: Ich spreche Deutsch selten in den letzten Tagen, habe generell manchmal Probleme mich auszudr=C3=BCcken es ist nicht nur das Englische, AH= DS sei dank. >>>> You might not >>>> like to hear it but without Melpa Emacs wouldn't be were it is now.. >>> >>> This is a counterfactual discussion, because it cannot be said if MELPA >>> was a necessary or contingent fact. I agree that MELPA provided an >>> important service in collecting the number of packages that it did, but >>> if NonGNU ELPA had been created over 10 years ago with the regular GNU >>> ELPA, perhaps it would have been enough? >> >> Some have issues with the FSF, RMS etc. staying out of the whole thing >> was convenient for some. >> Even if you ignore that Melpa was more convinient to use unless there's >> a more modern way to interact to with ELPA. > > I have floated the idea of creating an Emacs package for submitting ELPA > packages, that would help automatise the repetitive questions, such as > have you signed the FSF CA if you want to add a package to GNU ELPA, are > all the dependencies available, has basic code style been respected that > checkdoc and byte compilation can detect, etc.=20=20 That sounds like a good idea, some kind of CI that checks the packages would be nice, the Ci can run on the creation of a request or on whitelist. I think for a lot of people the way that the FSF acts or just the name leaves a bad taste in their mouth. Personally I think it quite sad that there isn't more corporation, I wish the FSF and FSFE would push for more free software in government and elsewhere around the world. In a lot environments uncertainty around free software especially after GPLv3 was released created by issues. A lot of places I've worked at had almost an allergy against things such as GPLv3. > Another idea I have heard been suggested is creating a separate issue > tracker for ELPA submissions and issues. I am not sure if this would > help that much, but I guess some people avoid the mailing list because > they don't want to initiate a long discussion. If debbugs would be list a little modern such things would be easier, just create a bug at the Gnu bugtracker under the ELPA product.=20 >> >> Nothing to argue about that. >> >>>>> A given package that happens to be in MELPA may be perfectly fine in >>>>> and of itself, or it may have problems of one kind of the other. >>>>> >>>>> If you come across a package in MELPA that has no particular problems, >>>>> we can DTRT to put it in either GNU ELPA or NonGNU ELPA. >>>> >>>> It's perfectly fine that is on Melpa, not everyone likes the mailing >>>> list based approach of Gnu. >>>> Offer other options such as a Gitlab or Gitea instance instead of >>>> antiquated Savanah (or make it more modern in other ways) >>>> and people might move elsewhere. >>> >>> I am afraid you have some misunderstandings regarding GNU ELPA (and I >>> suppose NonGNU ELPA as well). GNU ELPA packages can and often are >>> developed on PR-based forges, where the state is synchronised into >>> elpa.git/nongnu.git, where the packages are build and distributed. >>> There is no need to use mailing lists -- except maybe to announce a >>> package and to request it be added to an archive. But am I understating >>> your correctly that that is really the point you are objecting to? >> >> I'm sorry I wasn't aware of that, I assumed that using Github to develop >> the package is enough to disqualify it. > > No, that is the great thing about Git. I can clone and hack on a > package that is hosted on GitHub, without ever having to accept the > execution on Non Free Javascript on my device. Sure, the GNU project > would advise against using GitHub for several reasons, but as long as > you don't force others to use Non-Free Software, it is not a > deal-breaker. > > Just take a look at the current list of packages included in ELPA: > > https://git.savannah.gnu.org/cgit/emacs/elpa.git/tree/elpa-packages > > There are plenty of packages that are developed on GitHub or GitLab. > Almost none are currently maintained on Savannah. Luckily more and more > are also appearing on freedom respecting sites like Sourcehut. > > (I really don't know where this kind of misinformation stems from. I > have heard it too, and was scared at first. But it turns out that > people who haven't quite understand the arguments keep arguing against > strawmen in their own minds.) Yeah I understand that, I use Git in a similar way, I have my own mirrors but use Gitlab/Github for the network effect in the communities I need it. But the misinformation came at least from my side out of the issue that I wasn't aware that Melpa contains packages that engages with non-free software at least not to the extend that Emacs already does. Like there are Windows build for macos and Windows, Melpa contains packages for that interact with such operating systems in the same way. So Github was only remaining thing that is left as an issue. To be honest it makes sense since relaying it as a central hub is just bad no matter your position of free software.. >> I am objecting against the assumption Melpa equals bad. I can understand >> the issue with some of it's packages or even the place of distribution >> but it hard to replace a platform like Github for the network effect it >> has. > > The issue was just that Emacs doesn't want to refer to MELPA, because > the two projects clash in their respective interests. My understanding > is that MELPA tries to be exhaustive, while Emacs/ELPA prioritises that > all software can be used without loss of functionality on a fully free > system. A choice has to be made. > IMO this is often the result of "bad" software choices. The point is > not to ignore non-free software and pretend it doesn't exist. > Proprietary software is a means of exercising control over a user, and > some people are stuck in dominating environments, where the lack of > software freedom is symptomatic for their entire predicament, not > necessarily the cause of it. > It is not just bad software choices but also idealism vs reality. I can try to change the predicament that I'm tied to some non free programs or system but at some point my means are exhausted. First I need to have the means to do it, for example: I'm a software engineer I try to find alternatives, setup my own systems if needed and find out what is the best tool for what I want to do. But a lot of people don't have that power either because they don't have the resources or their environment forces them. For example at work or because the government doesn't offer free alternatives. I respect people such as RMS for sacrificing the convenience of using only free systems but I think that doesn't work for most. So to be able to keep using free software their are some Emacs packages or programs that interface with non-free systems. Referencing Melpa for such packages seem It is not just bad software choices but also idealism vs= reality. I can try to change the predicament that I'm tied to some non free programs or system but at some point my means are exhausted. First I need to have the means to do it, for example: I'm a software engineer I try to find alternatives, setup my own systems if needed and find out what is the best tool for what I want to do. But a lot of people don't have that power either because they don't have the resources or their environment forces them. For example at work or because the government doesn't offer free alternatives. I respect people such as RMS for sacrificing the convenience of using only free systems but I think that doesn't work for most. So to be able to keep using free software their are some Emacs packages or programs that interface with non-free systems. Referencing Melpa for such packages seem fine for me, except for instances where Elpa contains these packages themselves such as for Exchange support (Excorporate). That Emacs supports Windows, MacOS or other non-free platforms has a very similar reason I think.fine for me, except for instances where Elpa contains these packages themselves such as for Exchange support (Excorporate). That Emacs supports Windows, MacOS or other non-free platforms has a very similar reason I think. > I always like the example of browse-url, which has a user option > `browse-url-browser-function'. Among other things, you could set it to > the function `browse-url-chrome'. But wait, isn't Chrome the famous > non-free browser that spies on its users and one day might even make > watching an advisement mandatory? Sure, but all browse-url does it > provide a generic way of opening a URL in some external program. If the > user has to use Chrome, that is bad, but they don't have much of a > choice. But for free people, at home or in less restrictive > environments this doesn't make their "browse-url'ing" any worse. Chrome > is a possible, but not a necessary way to implement the feature. I > still get to use Firefox or eww. So everyone is happy, because the > functionality is generic and not called something like > "browse-using-google-chrome-and-only-google-chrome" -- which wouldn't > even make sense in this context. Yeah it is kinda strange, like why don't use your operating system for such choices, no need to have a function for that. > The simple fact is that MELPA insists on distributing software that make > these mistakes instead of trying to find a compromise position that can > help people bound to non-free systems make the most out of Emacs, while > not placing the rest at a functional disadvantage. > > In my eyes this is more than reasonable. I think people should have the ability to choose what they want to use, so unless the package is malicious I see no issue with people using a package. Doesn't mean that I like it thou. Thanks for talking Br, Bj=C3=B6rn