From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Thibaut Verron Newsgroups: gmane.emacs.devel Subject: Re: Proposal for an Emacs User Survey Date: Sun, 18 Oct 2020 10:57:57 +0200 Message-ID: References: <4a1188f8-9864-54c0-ae6f-5f32102d9757@gmx.com> <20201011073553.GA6784@odonien.localdomain> <20201011120840.GC2923@protected.rcdrun.com> <20201011125031.GC6784@odonien.localdomain> <20201012050418.GZ2923@protected.rcdrun.com> <20201013052736.GE31408@protected.rcdrun.com> <20201016130235.06218dae@argon> Reply-To: thibaut.verron@gmail.com Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="15333"; mail-complaints-to="usenet@ciao.gmane.io" Cc: Marcel Ventosa , Jean Louis , emacs-devel To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sun Oct 18 10:58:45 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kU4Wa-0003tO-Lj for ged-emacs-devel@m.gmane-mx.org; Sun, 18 Oct 2020 10:58:44 +0200 Original-Received: from localhost ([::1]:38634 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kU4WZ-0003V0-O3 for ged-emacs-devel@m.gmane-mx.org; Sun, 18 Oct 2020 04:58:43 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53910) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kU4W5-00035P-2z for emacs-devel@gnu.org; Sun, 18 Oct 2020 04:58:13 -0400 Original-Received: from mail-yb1-xb42.google.com ([2607:f8b0:4864:20::b42]:35665) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kU4W2-00012g-MX; Sun, 18 Oct 2020 04:58:12 -0400 Original-Received: by mail-yb1-xb42.google.com with SMTP id l15so6195463ybp.2; Sun, 18 Oct 2020 01:58:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:reply-to:from:date:message-id :subject:to:cc:content-transfer-encoding; bh=1s+icEqscgOWczizmJjVPbd/u0DkU3nEtbKWmI07tyA=; b=AqElZO6u89Skha1W8Wo3rPCIGDHQofk/7j7UzUVvJw1FuhCL5/WID4NWIazBl9EUK5 6LMq+u152kTF99OZBjehrzfxeicoG4ZHajfsQu5vxnAiHhxHs7lQcRX4coV+I4zfvoRS UMWpm2HJM3fG2W3+DeiQLhZgx5Sgn+9GvKtLUnKP/b6r29NvW51BxxJ+wHRYXHvw3knk Yw9ONafkmfES2tL2NQX5lSrGIq6UFPtgvrOU7J/PZ/ZvccaEecuMW93OjEkbQe/0+KHN QvRhieP2HP8A3wgwnLuH+nP09wzXxNRDD1Jcb7/3DgL2Yp2fetMWT+OsM98/KN6kC6N1 Yn4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:reply-to :from:date:message-id:subject:to:cc:content-transfer-encoding; bh=1s+icEqscgOWczizmJjVPbd/u0DkU3nEtbKWmI07tyA=; b=lkEB+ii88w41MA2ZhZjKjSKm1vu6g5AcR8XngIqAm3XjoLGrN9qOW+aBTny2Tau8Iv yyQ0c2Avmtq9KkwxFecoj5RpUP5TriZ9bqAK8RasrbTx3kr6IJLoC2c/B0RH6jwzHviu yeXCJalHD6KmdWztZtC+yC6LCx1WyVNx36cjrEaLDJYesPdizNXvxwqOjqojzdeABu2n agscDLVuNRyiwRlnUJgiUESgGLkaWAKUfh0yaOhfNwRygrE/YfCNP9cs+J+XmN/Av+pt DdB3J2hk4YXXP/PLq6nTNDPQ6Nflw0KXR396kGm7Tai/BJ1HArzek5am/GgpCulWWYul 2X0A== X-Gm-Message-State: AOAM530LAH4Tp5HJy9iO9evmCWMRPEKb5nw+JwTvhY3QZRb6GObRISNZ 5E+QcRACjP6tcf3+jcC4EqkhONNm230nf+RX08AIlRn5uno= X-Google-Smtp-Source: ABdhPJz7QnQ0G4IgHqDwdGtWJex53Tm7oq8kFJ/FTTv7jN36WM8jdZagHTqDmY2m/81iKayY7Db1B4gA3fZSR2fieQU= X-Received: by 2002:a25:4e46:: with SMTP id c67mr13741345ybb.87.1603011488825; Sun, 18 Oct 2020 01:58:08 -0700 (PDT) In-Reply-To: Received-SPF: pass client-ip=2607:f8b0:4864:20::b42; envelope-from=thibaut.verron@gmail.com; helo=mail-yb1-xb42.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:258012 Archived-At: Le dim. 18 oct. 2020 =C3=A0 06:10, Richard Stallman a =C3=A9c= rit : > > In fact, I would go the extra mile and say Emacs should expressly war= n > > users over the dangers of installing proprietary software from > > unofficial repositories > > That could be a good idea. What would be good occasions on which to warn= ? > > Perhaps in list-packages when it sees a non-GNU repo, or when it sees MEL= PA? With the subtlety that non-GNU Elpa would not be a non-GNU repo? > Perhaps in describe-package and packageinstall, when the package comes > from a non-GNU repo, or specifically from MELPA? Not all users use package.el, some still use git (either manually or through a package manager). If such a warning becomes implemented, would that automatically make package managers which do not (or cannot) display the warning as dangerous as Melpa is currently? --- Fwiw I still believe that information about Melpa on the webpage should be available, with appropriate warnings. When researching options, I found this webpage: https://www.gnu.org/software/gnuzilla/addons.html about IceCat extensions. It does give the URL for the Mozilla store, with a warning that some extensions may not be compatible with the goals of the GNU project, and then it gives a list of vetted extensions. Those add-ons are vetted for their licence and their free character. Only the latter would be necessary for Melpa. A problem with that list is that a lot of those extensions might have since disappeared from the Mozilla store, but that is not something that happens frequently with Melpa, especially when it comes to extremely popular packages. (Another problem, obviously, is that this page is obsolete, but as I understand it that's due to technical changes in Firefox, not to the page being incompatible with GNU policy.) So, would a similar approach be viable for Melpa in the Emacs manual and/or webpage? The work of vetting packages would not be wasted, since the same list could be immediately reused to populate non-GNU Elpa.