From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: PL support Date: Mon, 11 May 2020 14:05:57 -0400 Message-ID: References: <9mmFgzvrBwjt_n_VJyaJdXINraNi5HsGpwq-0MLeKiJA7kG2BQA4uywrzjyz7lpRS0OZDpjEi8lspOKYUA7P_QsODsDew_8nbH960G55fmY=@protonmail.com> <83k11ldpxs.fsf@gnu.org> <83imh5dnun.fsf@gnu.org> <83h7wpdms7.fsf@gnu.org> <83ftc9dm07.fsf@gnu.org> <0d678371-2df7-519e-5ec0-7e26bfa6ea34@gmail.com> <11dff979-002e-e03e-2e3e-cdb09fcc409e@yandex.ru> <8017be3d-a4ed-61eb-9bdb-9a95c77a0698@gmail.com> <3adf65ae-fd0d-4fee-adfd-e11d39a148fc@yandex.ru> <01e211df-acfb-fb8a-eedc-7cb439b64cd8@yandex.ru> <57491476-b7d1-ed1e-9eaf-bc45db607ae8@yandex.ru> <835zd2bf2h.fsf@gnu.org> <1c43f78b-2bc5-8c81-4a57-ba63bb721c85@yandex.ru> <83wo5i9z21.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="106367"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) Cc: cpitclaudel@gmail.com, emacs-devel@gnu.org, rms@gnu.org, Dmitry Gutov To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon May 11 20:07:29 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jYCpq-000RZr-Ux for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 20:07:26 +0200 Original-Received: from localhost ([::1]:56300 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jYCpq-0001fk-0u for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 14:07:26 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:40098) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jYCoW-0007pI-D4 for emacs-devel@gnu.org; Mon, 11 May 2020 14:06:04 -0400 Original-Received: from mailscanner.iro.umontreal.ca ([132.204.25.50]:9509) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jYCoU-0002P7-O7; Mon, 11 May 2020 14:06:03 -0400 Original-Received: from pmg1.iro.umontreal.ca (localhost.localdomain [127.0.0.1]) by pmg1.iro.umontreal.ca (Proxmox) with ESMTP id AF8F9100958; Mon, 11 May 2020 14:06:00 -0400 (EDT) Original-Received: from mail01.iro.umontreal.ca (unknown [172.31.2.1]) by pmg1.iro.umontreal.ca (Proxmox) with ESMTP id 12EF91007E4; Mon, 11 May 2020 14:05:59 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca; s=mail; t=1589220359; bh=f/L8mDaEY7dIf/g5odSgUZ8UuC+weUV5EXFPlbQD1Pk=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From; b=gCQ5kxSB55+amfPuwQqz7gXCQj83Iwi65e9/pE5xipM4LVbe//1pE71VyDKkCvd8Z q0lDcPr0DQQkv95KNmZoCtfF9dKz9cE7dODNpHv9kQo/BDoS6tCPB1VQmNZQc4Bzm5 qqsKgSr6iYHkq/Rb8ZhE1frH4LWfU5dhSf6ntDIANFLrx19OX2dI5QBhePjXxwq9wl fk7c8PwgvE8+sANOAi4hmQGbLO20boZA4/39XtW/bHNgj3oTYOM55n01seztRVyKHj 8Kc1WoiqCu95Qh4m4zKTu/25ZD+K5qwuxMlArQG5ef+MJuqRS40cR+lkJJZkLm8jOM jqFqO/hillP2A== Original-Received: from alfajor (unknown [216.154.3.202]) by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id A8041120268; Mon, 11 May 2020 14:05:58 -0400 (EDT) In-Reply-To: <83wo5i9z21.fsf@gnu.org> (Eli Zaretskii's message of "Mon, 11 May 2020 20:11:34 +0300") Received-SPF: pass client-ip=132.204.25.50; envelope-from=monnier@iro.umontreal.ca; helo=mailscanner.iro.umontreal.ca X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/11 10:58:52 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] X-Spam_score_int: -42 X-Spam_score: -4.3 X-Spam_bar: ---- X-Spam_report: (-4.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:249845 Archived-At: > Sorry, but this is not our problem. We cannot fix the entire world. > If Emacs users who install packages from MELPA have fears about their > security, let them take this up with MELPA admins, or fork MELPA and > make their own site, or do anything else. This isn't part of the > problem that the Emacs project should tackle. The way I see it, currently Emacs de-facto recommends to most of its users to add MELPA to their `package-archives`. Now, I actually think MELPA is pretty good (modulo the few packages in it which end up recommending/advertizing proprietary tools), so maybe a better solution is to be honest about this de-facto situation and actually add MELPA to the default value of `package-archives`. Of course, those few not-quite-libre packages could pose problems for that since they go against some of our values, so maybe we should not add MELPA itself, but the "libre-MELPA" subset (which someone will have to create and maintain). WDYT? Stefan