all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: arthur miller <arthur.miller@live.com>
To: Hongyi Zhao <hongyi.zhao@gmail.com>,
	Stefan Monnier <monnier@iro.umontreal.ca>
Cc: help-gnu-emacs <help-gnu-emacs@gnu.org>
Subject: Sv: Install orgmode using its git repository.
Date: Mon, 28 Dec 2020 08:08:07 +0000	[thread overview]
Message-ID: <AM0PR06MB65778E20B64CCAC4E5D0CE1A96D90@AM0PR06MB6577.eurprd06.prod.outlook.com> (raw)
In-Reply-To: <CAGP6POLzJAeLcV1SbqqxUvWbVuSCsQSRL1LuNVpZqk5GfvsWBw@mail.gmail.com>

I don't think it is very safe practice to install random Joe's code directly from
some git repo. We have not yet seen malicious code (not what I know) in
Emacs community, but Emacs in that respect is as bad as MS Office from
time when VBA scripts (and viruses) were shared wildly around, or a web
browserwith JS that can do anything. Remember time when JS was off by default
in all browsers?  Elisp can do whatever on your computer, so you should be
careful what you install. Installing from random git repos can open you for
more security problems then needed. I do clone lots from gitlab/github, but
I always look at the code myself before I ever run it.

Another point is that installing from git and different branches as it is possible
with straight.el  or quelpa (is what OP actually wants)  can eventually lead to
incompatibility between code that might be much harder to detect. I personally
don't want to  bother with latest-latest of all latest because eventually it could
become a spagheti code of possible incompatibility and clashes.
________________________________
Från: help-gnu-emacs <help-gnu-emacs-bounces+arthur.miller=live.com@gnu.org> för Hongyi Zhao <hongyi.zhao@gmail.com>
Skickat: den 28 december 2020 06:40
Till: Stefan Monnier <monnier@iro.umontreal.ca>
Kopia: help-gnu-emacs <help-gnu-emacs@gnu.org>
Ämne: Re: Install orgmode using its git repository.

On Mon, Dec 28, 2020 at 1:21 PM Stefan Monnier <monnier@iro.umontreal.ca> wrote:
>
> >> BTW, you can also install the latest code from Git via package.el:
> >>
> >>     M-x url-handler-mode RET       ;; Assuming it's not already enabled
> >>     C-x C-f https://elpa.gnu.org/devel/org.tar RET
> >>     M-x package-install-from-buffer RET
> >
> > If I want to implement the above codes as a package-install-from-repo
> > function with the pakcage's URL as the argument, then how should I
> > rewrite the above code?
>
> Not sure what you're asking.  Such a function would be a welcome
> addition to package.el, if that's what you mean.

I just noticed that this question has been discussed on stackexchange:

https://emacs.stackexchange.com/questions/51586/is-there-a-package-manager-for-emacs-that-can-use-git-repositories-directly

also, by the author of straight.el:
https://github.com/raxod502/straight.el#comparison-to-other-package-managers

Regards
--
Assoc. Prof. Hongyi Zhao <hongyi.zhao@gmail.com>
Theory and Simulation of Materials
Hebei Polytechnic University of Science and Technology engineering
NO. 552 North Gangtie Road, Xingtai, China



  reply	other threads:[~2020-12-28  8:08 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-12-27  6:23 Install orgmode using its git repository Hongyi Zhao
2020-12-27 16:17 ` Stefan Monnier
2020-12-28  0:12   ` Hongyi Zhao
2020-12-28  5:13     ` David Masterson
2020-12-28  5:21     ` Stefan Monnier
2020-12-28  5:40       ` Hongyi Zhao
2020-12-28  8:08         ` arthur miller [this message]
2020-12-28 15:53           ` Sv: " Stefan Monnier
2020-12-28 21:43           ` David Masterson
2020-12-28 23:16             ` arthur miller
2020-12-29 15:33               ` Leo Butler
2020-12-29 17:16                 ` arthur miller
2020-12-29 21:39                   ` Robert Thorpe
2020-12-30  0:07                     ` Hongyi Zhao
2020-12-29 17:18                 ` arthur miller
2020-12-29 23:44                 ` Hongyi Zhao
2020-12-28 15:52         ` Stefan Monnier
2020-12-27 17:50 ` Eli Zaretskii
2020-12-28  7:58 ` Sv: " arthur miller

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=AM0PR06MB65778E20B64CCAC4E5D0CE1A96D90@AM0PR06MB6577.eurprd06.prod.outlook.com \
    --to=arthur.miller@live.com \
    --cc=help-gnu-emacs@gnu.org \
    --cc=hongyi.zhao@gmail.com \
    --cc=monnier@iro.umontreal.ca \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.