From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Howard Melman Newsgroups: gmane.emacs.devel Subject: Re: What is GNU ELPA? Date: Fri, 15 May 2020 11:08:18 -0400 Message-ID: References: <35DBF02E-44D7-41E5-A217-7D6EC84ED221@icloud.com> <07d7ff5d-dd57-00e7-933f-3188d57d6185@yandex.ru> <96f718b4-8ba9-7b9a-f940-7070e4a9a424@yandex.ru> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="26450"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (darwin) To: emacs-devel@gnu.org Cancel-Lock: sha1:m44PZ+tWv8vODY/6H322PdjecOU= Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Fri May 15 17:12:09 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jZc0O-0006gF-L4 for ged-emacs-devel@m.gmane-mx.org; Fri, 15 May 2020 17:12:08 +0200 Original-Received: from localhost ([::1]:39018 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jZc0N-0007Ij-ML for ged-emacs-devel@m.gmane-mx.org; Fri, 15 May 2020 11:12:07 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:49074) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jZbwu-0000TG-T9 for emacs-devel@gnu.org; Fri, 15 May 2020 11:08:32 -0400 Original-Received: from ciao.gmane.io ([159.69.161.202]:45278) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jZbwt-0002xr-S5 for emacs-devel@gnu.org; Fri, 15 May 2020 11:08:32 -0400 Original-Received: from list by ciao.gmane.io with local (Exim 4.92) (envelope-from ) id 1jZbwp-0001Zs-Pt for emacs-devel@gnu.org; Fri, 15 May 2020 17:08:27 +0200 X-Injected-Via-Gmane: http://gmane.org/ Received-SPF: pass client-ip=159.69.161.202; envelope-from=ged-emacs-devel@m.gmane-mx.org; helo=ciao.gmane.io X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/15 11:08:29 X-ACL-Warn: Detected OS = Linux 3.11 and newer [fuzzy] X-Spam_score_int: 3 X-Spam_score: 0.3 X-Spam_bar: / X-Spam_report: (0.3 / 5.0 requ) BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FORGED_GMAIL_RCVD=1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, NML_ADSP_CUSTOM_MED=0.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:250393 Archived-At: ams@gnu.org (Alfred M. Szmidt) writes: > There are other, non-GNU, Emacs Lisp package servers, including: > @uref{https://melpa.org, MELPA}; and > @uref{https://marmalade-repo.org, Marmalade}. To use additional > package servers, customize the @code{package-archives} variable. Be > aware that installing a package can run arbitrary code, so only add > sources that you trust. > > This should probobly be removed, since melpa contains software that > recommends non-free software. I have an alternative approach. What if instead of removing the text you explained the rationale? There are other, non-GNU, Emacs Lisp package servers which you can access by customizing the @code{package-archives} variable. Be aware that installing a package can run arbitrary code, so only add sources that you trust. A very popular server is @uref{https://melpa.org, MELPA} but note that it contains some software that recommends non-free software. This allows people to find additional popular emacs packages, including truly free ones that are on melpa and not elpa and cautions them about finding non-free software, raising the issue for those that might not fully understand it. This seems better to me than having emacs remain mute on the subject. -- Howard