From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Dmitry Gutov Newsgroups: gmane.emacs.devel Subject: Re: Choice of bug tracker Date: Thu, 31 Aug 2023 00:09:43 +0300 Message-ID: References: <87il9kksqz.fsf@dfreeman.email> <83350ncbns.fsf@gnu.org> <87cyzrjbd8.fsf@dfreeman.email> <83zg2vav46.fsf@gnu.org> <87o7j99304.fsf@dfreeman.email> <87wmxj27fn.fsf@dfreeman.email> <831qfrptiq.fsf@gnu.org> <57429221-d9be-5791-e975-b3539905e2f6@gutov.dev> <83a5udlj47.fsf@gnu.org> <87a5udk1co.fsf@posteo.net> <835y51kslv.fsf@gnu.org> <7a82c524-1aa1-e755-e377-673ebb107a44@gutov.dev> <83r0nok8s4.fsf@gnu.org> <83ledwk4xi.fsf@gnu.org> <76ecf629-a41a-f6e4-f661-2ef926326d6c@gutov.dev> <83zg2cias7.fsf@gnu.org> <83pm37ie54.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="34520"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.13.0 Cc: Eli Zaretskii , philipk@posteo.net, danny@dfreeman.email, emacs-devel@gnu.org, manuel.uberti@inventati.org To: Stefan Kangas Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Wed Aug 30 23:10:47 2023 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1qbSSa-0008cd-Pw for ged-emacs-devel@m.gmane-mx.org; Wed, 30 Aug 2023 23:10:46 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qbSRo-0006xS-GP; Wed, 30 Aug 2023 17:09:56 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qbSRm-0006xK-Cx for emacs-devel@gnu.org; Wed, 30 Aug 2023 17:09:54 -0400 Original-Received: from wout2-smtp.messagingengine.com ([64.147.123.25]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qbSRj-0007MO-8v; Wed, 30 Aug 2023 17:09:54 -0400 Original-Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.west.internal (Postfix) with ESMTP id 4FE0C3200657; Wed, 30 Aug 2023 17:09:48 -0400 (EDT) Original-Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Wed, 30 Aug 2023 17:09:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gutov.dev; h=cc :cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:sender:subject:subject:to:to; s=fm3; t= 1693429787; x=1693516187; bh=SBPeBGDBs3JG9/u+S+8jWtQ3jgb/mMBFwj3 VXXEPk2Q=; b=RLmHV3yMVHw2MpESKO4rt8fUc8uYLWnoXdOyEl/NNnEPOo9kWkY vMwheJWqI9Z6MAMZ9tmga8gySqsX+AcOXYc72QVDQtq8cTRuD9ksCn/rdZDXpue8 Nvgq+VPN+Pzx8bf+gdZqH6Xs2ed6Cv1RB2PApQTmNsTX0z7fpDf3/IIMQ9ZsbV/v VbU3IbadaY3x4EP2IfTO0xExGbaLYP9F+CKC8F0mmXtNXrN1LxMWRYwTJBJUp2vK spaAjJ2tp+EHPvYMfK6KiD8GrZQ4y8unyjJSjwnFILVyC580La/pTttrynVQfiwR guGHVUEVxGbBkiXQxXUlJGKUWTt2gKjQJ8w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1693429787; x=1693516187; bh=SBPeBGDBs3JG9/u+S+8jWtQ3jgb/mMBFwj3 VXXEPk2Q=; b=hi1Lc3ZdejiB8dna1OYWy7BDzDTjckzh97PDTRepb4oi8Q1ynKL kQQnO13+82aVDlm6eHimFLKTIvY9dSIsDNfpxIaKoCD12uh2PaANr/IbVGoFTdJu jiPdP/JtbhV9jT/Ng8fHGFCdPtWeLR+A9LspMCnW6cy6jqbT/oHcnQoKox7W2QCN e2QSwCN//B82mXOvyPXOllC7Qu9kuiPmKb9BnDbvS6A/Yh6zl4tI8Ls9IuIs5lIW gVJwtmQm/mUfZWkxVj3XTvnLpSVwyV3wCK+/OfFG/eaQoeIdfZEvWWVho4B0wsq/ vbFTCGbsYU4jw8uKifbMB4K7Q9txcpuTRag== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedviedrudefkedgudeitdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefkffggfgfuvfevfhfhjggtgfesthejredttdefjeenucfhrhhomhepffhm ihhtrhihucfiuhhtohhvuceoughmihhtrhihsehguhhtohhvrdguvghvqeenucggtffrrg htthgvrhhnpeehudfgkeejtddtieevgeefhfdvtedtfefhieefieeitefgleefgefgtdeh geeghfenucffohhmrghinhepghhnuhdrohhrghdpghhithhlrggsrdgtohhmnecuvehluh hsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepughmihhtrhihsehg uhhtohhvrdguvghv X-ME-Proxy: Feedback-ID: i0e71465a:Fastmail Original-Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 30 Aug 2023 17:09:45 -0400 (EDT) Content-Language: en-US In-Reply-To: Received-SPF: pass client-ip=64.147.123.25; envelope-from=dmitry@gutov.dev; helo=wout2-smtp.messagingengine.com X-Spam_score_int: -39 X-Spam_score: -4.0 X-Spam_bar: ---- X-Spam_report: (-4.0 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-1.242, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.devel:309560 Archived-At: On 30/08/2023 21:03, Stefan Kangas wrote: > Dmitry Gutov writes: > >> The fact that LibreJS complains doesn't mean that the software is >> non-free. It just means that the annotations that LibreJS would >> recognize are missing. Most of the Internet is missing those. The >> overall mission of having JS files come with licenses in some form or >> other doesn't sound bad, but it shouldn't be a hard requirement for our >> platform, I think. It's not an urgent thing to fix. > > I'm afraid that this is non-optional according to GNU project policy: > https://www.gnu.org/prep/maintain/html_node/Freedom-for-Web-Pages.html I guess I shouldn't be surprised. > I'm looking at the LibreJS documentation here... > https://www.gnu.org/software/librejs/manual/html_node/Setting-Your-JavaScript-Free.html > > ...and here's a naive question: Is it that hard to fix this, if we are > happy to just hack up a solution, even an "ugly" one? (As opposed to > doing a clean job, hooking into the correct Gitlab asset pipelines and > what have you.) Here's the latest on the issue: https://gitlab.com/gitlab-org/gitlab/-/issues/15196#note_327436569 But if we wanted to circumvent the upstream, I suppose someone could write a script which would go around every .js file in /assets/webpack and made sure the appropriate comment is added there. That would have to be run every time we upgrade refresh/reinstall Gitlab, I suppose. We'd also have to watch out for any changes in assets pipeline (maybe the dir changes, maybe an extra dir appears). If LibreJS allowed a way to say "we've checked our dependencies and all of them are fine", maybe listing them all in a tag once, that would be easier. But more ambiguous in the legal sense.