From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Eric Abrahamsen Newsgroups: gmane.emacs.devel Subject: Re: Why are so many great packages not trying to get included in GNU Emacs? Date: Mon, 11 May 2020 12:27:11 -0700 Message-ID: <87imh2e0hc.fsf@ericabrahamsen.net> References: <9mmFgzvrBwjt_n_VJyaJdXINraNi5HsGpwq-0MLeKiJA7kG2BQA4uywrzjyz7lpRS0OZDpjEi8lspOKYUA7P_QsODsDew_8nbH960G55fmY=@protonmail.com> <97DA7804-F647-4A1D-B8E0-AFFE7A324C64@gmail.com> <87d07xamrg.fsf@ericabrahamsen.net> <878silajdl.fsf@ericabrahamsen.net> <87tv18pyh4.fsf@russet.org.uk> <83blmu9u57.fsf@gnu.org> <7c61a272-f4ba-fdfd-755b-1a720e8cc2df@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="81195"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) Cc: casouri@gmail.com, rms@gnu.org, emacs-devel@gnu.org, monnier@iro.umontreal.ca, Eli Zaretskii , phillip.lord@russet.org.uk, ndame@protonmail.com To: =?utf-8?Q?Cl=C3=A9ment?= Pit-Claudel Cancel-Lock: sha1:OLOQ7GaFHUZP8SqQXANikQPUVTg= Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon May 11 21:29:17 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jYE73-000L0J-4s for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 21:29:17 +0200 Original-Received: from localhost ([::1]:45768 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jYE72-00059t-0R for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 15:29:16 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:52726) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jYE58-0003eX-GH for emacs-devel@gnu.org; Mon, 11 May 2020 15:27:18 -0400 Original-Received: from ericabrahamsen.net ([52.70.2.18]:41180 helo=mail.ericabrahamsen.net) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jYE57-0004EM-AF; Mon, 11 May 2020 15:27:18 -0400 Original-Received: from localhost (75-172-112-137.tukw.qwest.net [75.172.112.137]) (Authenticated sender: eric@ericabrahamsen.net) by mail.ericabrahamsen.net (Postfix) with ESMTPSA id 780CEFA157; Mon, 11 May 2020 19:27:13 +0000 (UTC) Original-Newsgroups: gmane.emacs.devel In-Reply-To: <7c61a272-f4ba-fdfd-755b-1a720e8cc2df@gmail.com> (=?utf-8?Q?=22Cl=C3=A9ment?= Pit-Claudel"'s message of "Mon, 11 May 2020 15:13:23 -0400") Posted-To: gmane.emacs.devel Received-SPF: pass client-ip=52.70.2.18; envelope-from=eric@ericabrahamsen.net; helo=mail.ericabrahamsen.net X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/11 15:27:14 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:249870 Archived-At: The following message is a courtesy copy of an article that has been posted to gmane.emacs.devel as well. Cl=C3=A9ment Pit-Claudel writes: > On 11/05/2020 14.57, Eli Zaretskii wrote:>> From: Cl=C3=A9ment Pit-Claudel > Date: Mon, 11 May >>> 2020 14:51:26 -0400 Cc: eric@ericabrahamsen.net, casouri@gmail.com, >>> emacs-devel@gnu.org, monnier@iro.umontreal.ca, >>> ndame@protonmail.com >>>=20 >>> On 06/05/2020 22.43, Richard Stallman wrote: >>>> It is not terrible lot of work for people to deal with those >>>> issues, but I wouldn't assume a simple program can. >>>=20 >>> These days assignments are signed with PGP keys. Commits can also >>> be signed using PGP keys. Wouldn't that provide an reliable way to >>> pair up contributors who have assigned copyright with their >>> contributions? >>=20 >> I think you are missing the main point. The problem is not >> security, it is correct attribution. > > Sorry, it seems my email was unclear. The proposal doesn't have to do > with security. I'm trying to find a robust way to figure out if > someone has copyright papers. Right now Stefan & you can check the > list, and the rest of us can't, which is a problem for package > maintainers. Apparently the list can't be made public, so I'm > suggesting to make public a list of public keys public instead. I was > not thinking about security. > >> The author of the committed changeset (not the person who does the >> commit, the author) must be the person who actually wrote the code, >> not someone else. If that someone else is a real benevolent person, it i= s still a >> problem, because we will make a false presentation that a different >> person made the change. > > That problem exists regardless of how we check whether someone has > copyright papers, right? > What I'm trying to find is a way to check whether I can accept a patch > into an ELPA package without having to email an Emacs maintainer every > time. This is above my paygrade but I'm still on the cc, so... If the information needs to stay private because it contains PII that contributors haven't consented to release, would it be possible to set up something automatic where package maintainers enter an email address, and the system gives us a plain thumbs up or thumbs down? A webform, an API endpoint, an automated email address, even something built into debbugs...?