From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: Why are so many great packages not trying to get included in GNU Emacs? Date: Sat, 25 Apr 2020 23:21:15 -0400 Message-ID: References: <9mmFgzvrBwjt_n_VJyaJdXINraNi5HsGpwq-0MLeKiJA7kG2BQA4uywrzjyz7lpRS0OZDpjEi8lspOKYUA7P_QsODsDew_8nbH960G55fmY=@protonmail.com> <97DA7804-F647-4A1D-B8E0-AFFE7A324C64@gmail.com> Reply-To: rms@gnu.org Content-Type: text/plain; charset=Utf-8 Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="13350"; mail-complaints-to="usenet@ciao.gmane.io" Cc: casouri@gmail.com, ndame@protonmail.com, emacs-devel@gnu.org, monnier@iro.umontreal.ca, akrl@sdf.org To: Tim Cross Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Sun Apr 26 05:21:55 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jSXrf-0003OI-1S for ged-emacs-devel@m.gmane-mx.org; Sun, 26 Apr 2020 05:21:55 +0200 Original-Received: from localhost ([::1]:51118 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jSXre-0005d1-0V for ged-emacs-devel@m.gmane-mx.org; Sat, 25 Apr 2020 23:21:54 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:37506) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jSXr3-0004SH-Cb for emacs-devel@gnu.org; Sat, 25 Apr 2020 23:21:17 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:37378) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jSXr2-000673-R2; Sat, 25 Apr 2020 23:21:16 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1jSXr1-0001DQ-Nb; Sat, 25 Apr 2020 23:21:15 -0400 In-Reply-To: (message from Tim Cross on Sat, 25 Apr 2020 12:15:47 +1000) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:247814 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > A good security model needs to fulfill 3 requirements > 1. People only have access to what they need. The current model fails with > this requirement as developers have access to modifying code they are not > responsible for. Maintaining a specific GNU ELPA package in itsown individual repos (and automatically copying commits patches from there into GNU ELPA) would address this. Only the maintainers of that package, plus a few Emacs maintainers, would have access to write the per-package repo. > 2. Simple, reliable and robust. The system needs to be easy to use and > understand. If it is too complicated, it cannot be easily verified or > modified to fit evolving requirements. I think this change would not harm convenience. I presume the per-package repo would be as easy to use as the GNU ELPA repo is now. -- Dr Richard Stallman Chief GNUisance of the GNU Project (https://gnu.org) Founder, Free Software Foundation (https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org)