From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: chad Newsgroups: gmane.emacs.devel Subject: Re: MELPA issues - Re: Proposal for an Emacs User Survey Date: Fri, 16 Oct 2020 21:59:37 -0700 Message-ID: References: <20201011120840.GC2923@protected.rcdrun.com> <20201011125031.GC6784@odonien.localdomain> <20201012050418.GZ2923@protected.rcdrun.com> <20201013052736.GE31408@protected.rcdrun.com> <20201016130235.06218dae@argon> <20201016163345.GD3216@protected.rcdrun.com> <7f300e5d-2421-4817-bc6b-efed1f1b32af@yandex.ru> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="00000000000023a98e05b1d6c006" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="8977"; mail-complaints-to="usenet@ciao.gmane.io" Cc: Qiantan Hong , bugs@gnu.support, thibaut.verron@gmail.com, mve1@runbox.com, EMACS development team , Dmitry Gutov To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sat Oct 17 07:00:33 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kTeKW-0002F8-U3 for ged-emacs-devel@m.gmane-mx.org; Sat, 17 Oct 2020 07:00:33 +0200 Original-Received: from localhost ([::1]:48872 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kTeKV-0007Ra-R1 for ged-emacs-devel@m.gmane-mx.org; Sat, 17 Oct 2020 01:00:31 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:47192) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kTeJs-0006yj-3W for emacs-devel@gnu.org; Sat, 17 Oct 2020 00:59:52 -0400 Original-Received: from mail-yb1-xb35.google.com ([2607:f8b0:4864:20::b35]:35208) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kTeJq-0000Ff-6r; Sat, 17 Oct 2020 00:59:51 -0400 Original-Received: by mail-yb1-xb35.google.com with SMTP id l15so3698088ybp.2; Fri, 16 Oct 2020 21:59:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=MpRcBMjthKuH1T+q7V3ws+rrXzh5s3+R5R1kOoxmfnM=; b=VJzkbzOYTBGBIOnlH56J2M1icK3Qo++/WAt/Aad79tLQOJ+oKR4Q7ENtgq552od7Fq dQNnlWWFy6RutvyLVoiMdSOp4eWfwBkpHGMKaqG1OnvbQ8g1H6OO4LJMndetG9YGOVEd ueE0lk18XRmGSImzDrR8u5D92LdkGwDqIgkFT5Pbyw/Oe5C1gZ2vBcpezJBv/qQ9QEgN BXdZl3mbbVLcfSnRpZoPIsBxwVnJXdvndHVJDk5quSBSdLVLsuyYKbRwRjt0BzQk1uNq FWU+Dmoz84h+1VNybq2AX7YIBBRBOCer2IUigKCqzbi7qYj17+aeOLedVr24A5FBR9Ej WgaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=MpRcBMjthKuH1T+q7V3ws+rrXzh5s3+R5R1kOoxmfnM=; b=lOuHggXp7tP2Xb63iCKbeJEvYKubEZEBamMlGCT2luJ+eEH+7F3w9D2dCnuaKtiXdC Klnn4PDmQmcyMtFRnXDYDmVS9JUl1BRjjc8uYvnnktf4OEOz5NXUEFjwDInD6vXEm5r0 E4eX/QQ4wvg2OldXHhmGPDllNaCLKIvjtDvb1aQd704ID2XJeT0f56i4A5W1yzV5K2Fw lt+aIyI+yZkE80In6DyVCFlRT8OM1JmnNA1WKRYU+guh6JfHC4X54sssQ7FAVhOiCxwT Hf/u1sQmJg1StpSfixdmT8pUXH7Os87Q3Myoy5xjsjz7BCGVM5mw+AfW7diPQDhS25DK kpEg== X-Gm-Message-State: AOAM531lPqtAoBPJDKwChL41bw7M2yNahI1Pq16k9zbjwCKde9GUXHCK URLZ/al5G6RkzcjkUCb+y5oxTO8uBj08nS9faogk6xWIP1T5go2u X-Google-Smtp-Source: ABdhPJwrcrm+q9EaE53J4+WOmKmX5NyQSsXNQIQndZRWdNAhhv+phOnP5HZBlIZauhSJ3lNrwVsfB6mdt+zEk+762Tg= X-Received: by 2002:a25:60b:: with SMTP id 11mr8810507ybg.247.1602910788232; Fri, 16 Oct 2020 21:59:48 -0700 (PDT) In-Reply-To: Received-SPF: pass client-ip=2607:f8b0:4864:20::b35; envelope-from=yandros@gmail.com; helo=mail-yb1-xb35.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -17 X-Spam_score: -1.8 X-Spam_bar: - X-Spam_report: (-1.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:257907 Archived-At: --00000000000023a98e05b1d6c006 Content-Type: text/plain; charset="UTF-8" On Fri, Oct 16, 2020 at 9:20 PM Richard Stallman wrote: > > As a package writer, my main concern is that > > it seems that the package submission process > > require proprietary software (particularly non-free > > JavaScript by m$ Github). > > What I would do, in that situation, is not submit my package to Melpa. > > Meanwhile, this aspect of Melpa is an additional reason not to do > anything to lead people to use Melpa. > This seems to be based on the incorrect assumption that package authors must use GitHub to use MELPA. According to the MELPA docs: MELPA supports git , github , > gitlab , and hg (Mercurial) > [...] > :url specifies the URL of the version control repository. > *required for the git, and hg fetchers. [...]*:repo specifies the github > or gitlab repository and is of the form user/repo-name. *required for > the github and gitlab fetchers*. Digging in a bit further, MELPA used to also support EmacsWiki, which it deprecated for security concerns, and Bazaar, CVS, Darcs, Fossil and Subversion, which it deprecated due to lack of use. ~Chad --00000000000023a98e05b1d6c006 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Fri, Oct 16, 2020 at 9:20 PM Richard S= tallman <rms@gnu.org> wrote:
=C2=A0 > As a package writer, my main concern is that
=C2=A0 > it seems that the package submission process
=C2=A0 > require proprietary software (particularly non-free
=C2=A0 > JavaScript by m$ Github).

What I would do, in that situation, is not submit my package to Melpa.

Meanwhile, this aspect of Melpa is an additional reason not to do
anything to lead people to use Melpa.

T= his seems to be based on the incorrect assumption that package authors must= use GitHub to use MELPA. According to the MELPA docs:

=
=C2=A0MELPA supports=C2=A0git= ,=C2=A0github= ,=C2=A0gitl= ab, and=C2=A0= hg=C2=A0(Mercurial) [...]
:url=C2=A0=C2=A0required for the=C2=A0git, and=C2=A0hg=C2=A0fetchers. [...]
:repo=C2=A0=C2=A0user/repo-name.=C2=A0required for the=C2=A0github=C2=A0and=C2=A0gitla= b=C2=A0fetchers.
=C2=A0
Digging in a bit further, MEL= PA used to also support EmacsWiki, which it deprecated for security=C2=A0co= ncerns, and=C2=A0Bazaar, CVS, Darcs, Fossil and Subversion, which it deprec= ated due to lack of use.

~Chad
--00000000000023a98e05b1d6c006--