| 1 |
Well a few things need to happen: |
| 2 |
|
| 3 |
1. app-text/tidy-html5 - Need to go Stabl |
| 4 |
2. dep and rdep need to be migrated to tidy-html5 and tested. |
| 5 |
|
| 6 |
Since Patrice (monsieurp) is the maintainer of tidy-html5, do you want |
| 7 |
to become maintainer of htmltidy temporarily to help kill it and move to |
| 8 |
tidy-html5? |
| 9 |
|
| 10 |
|
| 11 |
On 6/6/16 10:41 AM, Raymond Jennings wrote: |
| 12 |
> If tidy-html5 can take care of anything htmltidy can, then we can boot |
| 13 |
> the latter as obsolete anyhow. Are there any backwards compatibility |
| 14 |
> issues if we just punt it and let tidy-html5 take over? |
| 15 |
> |
| 16 |
> On Mon, Jun 6, 2016 at 7:15 AM, Yury German <blueknight@g.o |
| 17 |
> <mailto:blueknight@g.o>> wrote: |
| 18 |
> |
| 19 |
> |
| 20 |
> |
| 21 |
> On 6/5/16 8:02 PM, Patrice Clement wrote: |
| 22 |
> > Sunday 05 Jun 2016 19:39:26, Yury German wrote : |
| 23 |
> >> app-text/htmltidy currently has no maintainers. It has a vulnerability |
| 24 |
> >> [Security Bug] filed against it. And a number of other [package depend |
| 25 |
> >> on it]. Is nyone willing to pick it up? |
| 26 |
> >> |
| 27 |
> >> [Secuity Bug] |
| 28 |
> >> https://bugs.gentoo.org/show_bug.cgi?id=561452 |
| 29 |
> >> |
| 30 |
> >> [package depend on it] |
| 31 |
> >> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy |
| 32 |
> >> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy |
| 33 |
> |
| 34 |
> > Don't bother. Have a look at [1], [2] & [3] to find out why. |
| 35 |
> > |
| 36 |
> > tl;dr |
| 37 |
> > |
| 38 |
> > htmltidy has got to be culled at some point since it's now considered obsolete |
| 39 |
> > after tidy-html5 entered the tree a little while ago. It's roughly the same |
| 40 |
> > codebase yet it's HTML 5 compliant. Yay! |
| 41 |
> > |
| 42 |
> > I've been maintaining the latter since its inclusion in the Portage tree but |
| 43 |
> > would definitely need help to remove the former. I didn't swap htmltidy for |
| 44 |
> > tidy-html5 cause they're two different projects. As you can see from the links |
| 45 |
> > above, htmltidy has a gazillion deps. |
| 46 |
> > |
| 47 |
> > [1]: http://tidy.sourceforge.net/ |
| 48 |
> > [2]: http://www.html-tidy.org/ |
| 49 |
> > [3]: https://github.com/htacg/tidy-html5 |
| 50 |
> > |
| 51 |
> |
| 52 |
> This is all agreed, but unless someone is driving this it will never get |
| 53 |
> removed from tree. The security patch is one thing, but cleaning it up |
| 54 |
> and switching to tidy-html5 is why we need a maintainer so that we can |
| 55 |
> get rid of the dependencies otherwise it will sit there unsecured for |
| 56 |
> the next 5 years. |
| 57 |
> |
| 58 |
> |
| 59 |
> |
Archives