| 1 |
(forwarding to the list...) |
| 2 |
|
| 3 |
---------- Forwarded message ---------- |
| 4 |
From: Alfredo Tupone <tupone@g.o> |
| 5 |
Date: Sat, Aug 13, 2011 at 13:56 |
| 6 |
Subject: Re: net-zope maintenance |
| 7 |
To: djc@g.o |
| 8 |
|
| 9 |
I am not more interested on plone/zope from portage |
| 10 |
|
| 11 |
Dirkjan Ochtman <djc@g.o> ha scritto: |
| 12 |
>Hi there, |
| 13 |
> |
| 14 |
>I just completed removing the python herd from the metadata of about |
| 15 |
>70 packages in the net-zope category (all of these packages are still |
| 16 |
>nominally maintained by the net-zope herd). This happened due to the |
| 17 |
>fact that the majority of the python team isn't interested in |
| 18 |
>maintaining Zope-related packages (there's 200+ of them in the |
| 19 |
>net-zope category), and a different herd already exists that should in |
| 20 |
>theory be able to take care of them. |
| 21 |
> |
| 22 |
>The net-zope herd nominally has two members: radek and tupone. From |
| 23 |
>grepping changelogs, radek hasn't committed anything in net-zope since |
| 24 |
>2007. tupone committed one change in net-zope in 2010 and 4 in 2009. |
| 25 |
>Instead, most of the recent work has been done by arfrever, who has |
| 26 |
>recently been retired. |
| 27 |
> |
| 28 |
>Given this situation, I'm not sure it makes sense for us to keep all |
| 29 |
>of those packages in the tree. Except for dependencies on |
| 30 |
>zope-interface, which is pretty accepted and will keep being |
| 31 |
>maintained by the python team in addition to the net-zope team, not |
| 32 |
>much is depending on net-zope packages, either: |
| 33 |
> |
| 34 |
>app-admin/zprod-manager depends on net-zope/zope (hasn't been |
| 35 |
>committed to since 2008) |
| 36 |
> |
| 37 |
>dev-python/rdflib has an optional dependency on net-zope/zodb, in |
| 38 |
>addition to many other storage backends |
| 39 |
> |
| 40 |
>media-libs/FusionSound for whatever reason blocks net-zope/zodb |
| 41 |
> |
| 42 |
>(There are two packages in dev-python that depend on zope-testing, but |
| 43 |
>those are actually only dependencies of net-zope packages again.) |
| 44 |
> |
| 45 |
>Zope maintenance is a lot of work and delays other stuff indefinitely: |
| 46 |
> |
| 47 |
>https://bugs.gentoo.org/show_bug.cgi?id=148333 (blockers for Python 2.5) |
| 48 |
>https://bugs.gentoo.org/show_bug.cgi?id=335248 (new Plone requires |
| 49 |
>80-100 new ebuilds) |
| 50 |
> |
| 51 |
>And there are 3 open security bugs from 2011 with vulnerabilities in |
| 52 |
>Zope and/or Plone. |
| 53 |
> |
| 54 |
>So unless someone steps up to takes a serious whack at all of this |
| 55 |
>stuff, perhaps we should just cut it from the portage tree. |
| 56 |
> |
| 57 |
>Cheers, |
| 58 |
> |
| 59 |
>Dirkjan |
Archives