1 |
I'm not a gentoo developer yet (rl drama has majorly lagged me on getting |
2 |
my quizzes done) but if there's a way I can help it I wouldn't mind. |
3 |
|
4 |
On Mon, Jun 6, 2016 at 7:55 AM, Yury German <blueknight@g.o> wrote: |
5 |
|
6 |
> Well a few things need to happen: |
7 |
> |
8 |
> 1. app-text/tidy-html5 - Need to go Stabl |
9 |
> 2. dep and rdep need to be migrated to tidy-html5 and tested. |
10 |
> |
11 |
> Since Patrice (monsieurp) is the maintainer of tidy-html5, do you want |
12 |
> to become maintainer of htmltidy temporarily to help kill it and move to |
13 |
> tidy-html5? |
14 |
> |
15 |
> |
16 |
> On 6/6/16 10:41 AM, Raymond Jennings wrote: |
17 |
> > If tidy-html5 can take care of anything htmltidy can, then we can boot |
18 |
> > the latter as obsolete anyhow. Are there any backwards compatibility |
19 |
> > issues if we just punt it and let tidy-html5 take over? |
20 |
> > |
21 |
> > On Mon, Jun 6, 2016 at 7:15 AM, Yury German <blueknight@g.o |
22 |
> > <mailto:blueknight@g.o>> wrote: |
23 |
> > |
24 |
> > |
25 |
> > |
26 |
> > On 6/5/16 8:02 PM, Patrice Clement wrote: |
27 |
> > > Sunday 05 Jun 2016 19:39:26, Yury German wrote : |
28 |
> > >> app-text/htmltidy currently has no maintainers. It has a |
29 |
> vulnerability |
30 |
> > >> [Security Bug] filed against it. And a number of other [package |
31 |
> depend |
32 |
> > >> on it]. Is nyone willing to pick it up? |
33 |
> > >> |
34 |
> > >> [Secuity Bug] |
35 |
> > >> https://bugs.gentoo.org/show_bug.cgi?id=561452 |
36 |
> > >> |
37 |
> > >> [package depend on it] |
38 |
> > >> |
39 |
> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy |
40 |
> > >> |
41 |
> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy |
42 |
> > |
43 |
> > > Don't bother. Have a look at [1], [2] & [3] to find out why. |
44 |
> > > |
45 |
> > > tl;dr |
46 |
> > > |
47 |
> > > htmltidy has got to be culled at some point since it's now |
48 |
> considered obsolete |
49 |
> > > after tidy-html5 entered the tree a little while ago. It's roughly |
50 |
> the same |
51 |
> > > codebase yet it's HTML 5 compliant. Yay! |
52 |
> > > |
53 |
> > > I've been maintaining the latter since its inclusion in the |
54 |
> Portage tree but |
55 |
> > > would definitely need help to remove the former. I didn't swap |
56 |
> htmltidy for |
57 |
> > > tidy-html5 cause they're two different projects. As you can see |
58 |
> from the links |
59 |
> > > above, htmltidy has a gazillion deps. |
60 |
> > > |
61 |
> > > [1]: http://tidy.sourceforge.net/ |
62 |
> > > [2]: http://www.html-tidy.org/ |
63 |
> > > [3]: https://github.com/htacg/tidy-html5 |
64 |
> > > |
65 |
> > |
66 |
> > This is all agreed, but unless someone is driving this it will never |
67 |
> get |
68 |
> > removed from tree. The security patch is one thing, but cleaning it |
69 |
> up |
70 |
> > and switching to tidy-html5 is why we need a maintainer so that we |
71 |
> can |
72 |
> > get rid of the dependencies otherwise it will sit there unsecured for |
73 |
> > the next 5 years. |
74 |
> > |
75 |
> > |
76 |
> > |
77 |
> |
78 |
> |