From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 6FD8013829C for ; Mon, 6 Jun 2016 14:56:00 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 083BF1431A; Mon, 6 Jun 2016 14:55:53 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 07C7C14243 for ; Mon, 6 Jun 2016 14:55:51 +0000 (UTC) Received: from Elminster.local (pool-72-69-190-242.nycmny.fios.verizon.net [72.69.190.242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: blueknight) by smtp.gentoo.org (Postfix) with ESMTPSA id C0A3E340C23 for ; Mon, 6 Jun 2016 14:55:50 +0000 (UTC) Subject: Re: [gentoo-dev] app-text/htmltidy: Maintainer Request References: <20160606000206.GA16974@ultrachro.me> To: gentoo-dev@lists.gentoo.org From: Yury German Message-ID: <64e75ec6-d1a1-188d-52db-db3eba51518b@gentoo.org> Date: Mon, 6 Jun 2016 10:55:48 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Archives-Salt: 38ffcda3-5d94-4c28-8cbd-7cb80dcdc2b7 X-Archives-Hash: 004e63426088f411bf1d7ba9bb776b29 Well a few things need to happen: 1. app-text/tidy-html5 - Need to go Stabl 2. dep and rdep need to be migrated to tidy-html5 and tested. Since Patrice (monsieurp) is the maintainer of tidy-html5, do you want to become maintainer of htmltidy temporarily to help kill it and move to tidy-html5? On 6/6/16 10:41 AM, Raymond Jennings wrote: > If tidy-html5 can take care of anything htmltidy can, then we can boot > the latter as obsolete anyhow. Are there any backwards compatibility > issues if we just punt it and let tidy-html5 take over? > > On Mon, Jun 6, 2016 at 7:15 AM, Yury German > wrote: > > > > On 6/5/16 8:02 PM, Patrice Clement wrote: > > Sunday 05 Jun 2016 19:39:26, Yury German wrote : > >> app-text/htmltidy currently has no maintainers. It has a vulnerability > >> [Security Bug] filed against it. And a number of other [package depend > >> on it]. Is nyone willing to pick it up? > >> > >> [Secuity Bug] > >> https://bugs.gentoo.org/show_bug.cgi?id=561452 > >> > >> [package depend on it] > >> https://qa-reports.gentoo.org/output/genrdeps/dindex/app-text/htmltidy > >> https://qa-reports.gentoo.org/output/genrdeps/rindex/app-text/htmltidy > > > Don't bother. Have a look at [1], [2] & [3] to find out why. > > > > tl;dr > > > > htmltidy has got to be culled at some point since it's now considered obsolete > > after tidy-html5 entered the tree a little while ago. It's roughly the same > > codebase yet it's HTML 5 compliant. Yay! > > > > I've been maintaining the latter since its inclusion in the Portage tree but > > would definitely need help to remove the former. I didn't swap htmltidy for > > tidy-html5 cause they're two different projects. As you can see from the links > > above, htmltidy has a gazillion deps. > > > > [1]: http://tidy.sourceforge.net/ > > [2]: http://www.html-tidy.org/ > > [3]: https://github.com/htacg/tidy-html5 > > > > This is all agreed, but unless someone is driving this it will never get > removed from tree. The security patch is one thing, but cleaning it up > and switching to tidy-html5 is why we need a maintainer so that we can > get rid of the dependencies otherwise it will sit there unsecured for > the next 5 years. > > >