1 |
-----BEGIN PGP SIGNED MESSAGE----- |
2 |
Hash: SHA512 |
3 |
|
4 |
On 02/14/2015 09:55 PM, Anthony G. Basile wrote: |
5 |
> On 02/14/15 15:48, Andreas K. Huettel wrote: |
6 |
>> Hi all, |
7 |
>> |
8 |
|
9 |
|
10 |
.. |
11 |
|
12 |
|
13 |
>> |
14 |
>> Many arguments have already been made. Feel free to summarize |
15 |
>> your points again in a reply to this e-mail. |
16 |
>> |
17 |
>> Cheers, Andreas |
18 |
>> |
19 |
|
20 |
First of all, thank you Andreas for brining this up in an appropriate |
21 |
thread of its own. |
22 |
|
23 |
> |
24 |
> I didn't know that was in our social contract, but I totally stand |
25 |
> behind it. I feel very uneasy about our increasing use/dependency |
26 |
> on github. I'd like to see the stuff we have on github migrate |
27 |
> back to our infra. |
28 |
> |
29 |
|
30 |
The most important part here is "depend upon". As long as the primary |
31 |
repository and developer workflow internally happens on infra hosted |
32 |
systems, having a copy of the repository on github to allow external |
33 |
contributions is no issue the way I interpret it, and it can only be a |
34 |
positive thing if we get such contributions. However, this should not |
35 |
be used as a primary component of the workflow, and people should |
36 |
certainly keep the social contract in mind when structuring projects. |
37 |
|
38 |
It would of course be even better if we had our own infrastructure, or |
39 |
procedures, in place to enable this within our own infrastructure. But |
40 |
from what I can see in the various discussion, the review tools that |
41 |
have been mentioned really are not up to par in terms of release |
42 |
management and possibility to keep up to date and secure in any sane |
43 |
way. How this can be the situation in the first place is a longer (and |
44 |
perhaps scarier) discussion. |
45 |
|
46 |
- -- |
47 |
Kristian Fiskerstrand |
48 |
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net |
49 |
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 |
50 |
-----BEGIN PGP SIGNATURE----- |
51 |
|
52 |
iQEcBAEBCgAGBQJU37mMAAoJEP7VAChXwav6ffUH/0E4lez3noTIVu2FqdLn0nfK |
53 |
sUwJdRk7KG8AV+E6o39JNasC6Ku4O6/2kl+sNIRp3FpStvXfs1GM1ImhtxHrw8K/ |
54 |
+KzikyfLv8TfwHj10qsQHY1/RPUtmQfJ+RgRyHDTGUKpUqx4+UJlUovPFkR3egC7 |
55 |
qbEBdpu2hb3ZC1WxAxS1w/RzxuyDT67UixvozzC8UErliVp5gj10BxTZJ/C7Dr4K |
56 |
opLMgmu3rbMnh36W3bgXWItSwiTDFuaj2R1D27qmcOcQgv7oGecEPmt6Oxyc7AJ1 |
57 |
uken67qfJLjO2PG1UC+tBfUA1Hl53hdz8RqUjCED4lQMF/VRD7ZDQS5G9LFPvRo= |
58 |
=55Qz |
59 |
-----END PGP SIGNATURE----- |