From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: In Support of ELPA Date: Thu, 13 Jul 2017 22:12:38 -0400 Message-ID: References: <87eftmejer.fsf@russet.org.uk> <87wp7ccnz6.fsf@russet.org.uk> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1499998383 480 195.159.176.226 (14 Jul 2017 02:13:03 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 14 Jul 2017 02:13:03 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) Cc: emacs-devel@gnu.org To: phillip.lord@russet.org.uk (Phillip Lord) Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Jul 14 04:12:59 2017 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dVq68-0007va-64 for ged-emacs-devel@m.gmane.org; Fri, 14 Jul 2017 04:12:52 +0200 Original-Received: from localhost ([::1]:34981 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dVq6A-0001tE-KC for ged-emacs-devel@m.gmane.org; Thu, 13 Jul 2017 22:12:54 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:33147) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dVq61-0001sd-I1 for emacs-devel@gnu.org; Thu, 13 Jul 2017 22:12:46 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dVq5x-0000X5-HG for emacs-devel@gnu.org; Thu, 13 Jul 2017 22:12:45 -0400 Original-Received: from pruche.dit.umontreal.ca ([132.204.246.22]:48708) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dVq5x-0000Wx-AD for emacs-devel@gnu.org; Thu, 13 Jul 2017 22:12:41 -0400 Original-Received: from ceviche.home (lechon.iro.umontreal.ca [132.204.27.242]) by pruche.dit.umontreal.ca (8.14.7/8.14.1) with ESMTP id v6E2CcCA031766; Thu, 13 Jul 2017 22:12:38 -0400 Original-Received: by ceviche.home (Postfix, from userid 20848) id 7450B660B0; Thu, 13 Jul 2017 22:12:38 -0400 (EDT) In-Reply-To: <87wp7ccnz6.fsf@russet.org.uk> (Phillip Lord's message of "Thu, 13 Jul 2017 17:15:25 +0100") X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0 X-NAI-Spam-Rules: 2 Rules triggered EDT_SA_DN_PASS=0, RV6071=0 X-NAI-Spam-Version: 2.3.0.9418 : core <6071> : inlines <5978> : streams <1754086> : uri <2462399> X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 132.204.246.22 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:216626 Archived-At: > If the outside host is someone who has write access to ELPA does it make > any difference? It's just a different way of trusting people. "The outside host" is a machine, it's not a "someone". "has write access" is a property which can change over time. So unless we have some process or someone watching over those changes "had write access when we added the package" will often turn into some rather irrelevant historical data, > Ultimately, pull requests of this form would result in emails going to > the ELPA-diffs mailing list, so we'd be able to check there. And, if we > can get the people who have assigned copyright as a CSV along with their > aliases, you could check the commit messages on the way through for > authorship. "git push elpa" is not that hard either. Stefan