From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 3514B138334 for ; Sat, 23 Jun 2018 13:05:57 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1B94DE091A; Sat, 23 Jun 2018 13:05:51 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 94861E08FA for ; Sat, 23 Jun 2018 13:05:50 +0000 (UTC) Received: from [192.168.1.12] (xdsl-78-34-156-246.netcologne.de [78.34.156.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: jstein) by smtp.gentoo.org (Postfix) with ESMTPSA id 148BD335C81 for ; Sat, 23 Jun 2018 13:05:47 +0000 (UTC) Subject: Re: [gentoo-dev] Idea for a new project: gentoo-libs To: gentoo-dev@lists.gentoo.org References: <20180623025046.djmsv44moxuqkv6t@proprietary-killer> <20180623025739.clijycvxkfskmmdy@proprietary-killer> From: Jonas Stein Openpgp: preference=signencrypt Autocrypt: addr=jstein@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFU9P/8BEAC4eFSjYPbOs5Z7r7BS8YaBf1et+FiD8WE4bYwmjp2FAquHoFratahZYH0v 4reTlQVdIh7hRJS5MLCn2EY3WCloUfUCA+mZI6zl1gw7p+GAODoJGVKmJhBBk36AYnxqvdU9 hp2zpwsTi6WeXExHqaUwc8ksRiXDBIy21Qx4jc280fDXoQsgiuX0xU5Vsq3BF0DsG+8EUGGL ByYb/3EnJ0AgZEZDRpEl3Zz7DafPqU8gt8gHRxm0znBh68a2Xai0/fxvGunHrq/hte4LT/Az lsLojZLf0oOcTQyQeolwZ/wyZRIaUNpEmnX47KQt/p1mtn//Vdum/CvZ4pFL6YavbATjBE1c wxQ1qihTjpKjO367kBBI/+qZfNAJjQB3ZxZ91stAICgiXWvOwqPkmejkG/fjUVOo5zhHu6or o3/SmsDETgDhuypTffUZYfGl8+ZYSknvPye4D05k1+G5ATtkzoCK7P501sIrCqd7BBWbkcBB IHITzaIn8/OlArOjQ7riW/1otorOXcoLVAVO/8PKBQ+SgqaSzVl/vNpfd4nLAd1WV1L/GSnI 25THkuKxkma/cMwS/8S2ZjSsEMb8xeFYgmSDzYVcpZE1c9aLfqvUEw2dDCeFV3SA0HQKut8M +ziZSDISj0+ydZqg3W9jTWpTF7bv/shX5wDzzw5rPNtzkg0DPwARAQABzR9Kb25hcyBTdGVp biA8anN0ZWluQGdlbnRvby5vcmc+wsGUBBMBCAA+AhsDBQsJCAcDBRUKCQgLBRYDAgEAAh4B AheAFiEEBKx6IeHrw2Yc9cGSJwyHV7n+l/8FAll7qxIFCQgA0hMACgkQJwyHV7n+l/9lERAA puBh0Q5t4FUNXHGvE59Bqgi1q6Cun8/FXAh8CdsTxjv0C6GCzC4MFq3cwWgkLJiVtZp2w+GG 0nYkUrIsOb+RHL4PTT77SKNzUqj3F9VdjoDjQIJKxbHEGCQYWtuMYE/kyp12CvnTtlEsk1e2 T3XUyKckkFpxhRiwhq6M0TEaJChCaGOxVTedH1kMXZMZ8VqhyBs780GNTwz76TW7BdBu+1iz Bg2YwF8Gs5Of9z+32Ev5wOZqEcJ0dJrAeDldAOIYQUeCYDamsjHwXzRQYpo45QaH+3F9icAF +bXqxSTsS4Y51PN6zP2uvFoBlkGyInM/9+WuR7YPVLJAg5mFCCbebai+chaHkNAWsvx7kbuq lZP/f1FBFz88Bhu1kDKMTE3BEKLLXIDmJhzaUKpyhZjM0kxP3GX2Nm8gaGyRrR8Nxfg2es09 OgBNz9QBcPYm6SqpHQJxEyY+NvpnGkFnKXaX6FJ1WHWMtDzJX4hXBTcc/95cc0qKsIzjnJqL 0LvcBqpK8+BNicOLMRMwG5oj99yDNmfbkbqRyC+CmJSsOgT7aPx+P0jzgyMUjiysxzyBZ0Wl K0wdyV6FSN4NLfsywx+Mvau5cCJ1G9k4w/de4Rhxql5TIDN/xN5tDFrWT/RlTwaVlV4DkY3w Dfe+2hE1GsStnSi5ftiqHEq/op9me2eqOObOwU0EVT0//wEQAMiLJNzGmCcekXgUj1hOEdDb /iyPNaxAAa+0M9MHQkSfl3KS53dJ//jtRpfFu5ITTCzhEZ74Evy9+w5xR+jvNccAtB/73fhi yQKtdu1rNiljODCWrcGm/2K3/vkGFIK14AS7CYNuknRo/GCwxQhqCGeEh8OZYiEcXdzUQoBj CcZggxJV8mYDWE+zsWN0ITPxVUHNx/nJ2wYh8AUFDsCdKirxDRsWkuTwi3TrZLgZpEdrFCUM D0BAqa33Pw++OysAIxb3gZF/HoSb++gNToY0JneOVRjZqOq8iGATNozpu15COtUnKuBriwH8 SprAY2KPhhhu8J21uLHGgC+sTBoomQJXRPL5M8gr3bP8aVVQaf8G+pFyQKRSO7Kc/XDDE4Mq Knqu/hB8NJ3mMpn7qites/fL2p39nuT7dethN3ELaeFl86wdgDScDVqy5gV7dWbMWFlulWGY pfJeMomk12CGxsDiVv3z6fKEyYgIzmUlyTP62cYT6Y+deOj816rIQW3HElUAPXmmeMcKU6Gk SeObcZ5S8XTlFI3ViXRCTCm0OGahd2s0A69FNVeUkhSTw4vTfH0YzhXNJDt4TvOwdtggfbHg 8mtZKhGKkHBmDfnhlvVi1Kkzi/PFlGrIaqFmLEj/jYti/hnlzCcRJ4SLq3FexYwfBtyYhMN+ fZIqWJi5KfD/ABEBAAHCwXwEGAEIACYCGwwWIQQErHoh4evDZhz1wZInDIdXuf6X/wUCWXur /wUJCADTAAAKCRAnDIdXuf6X/1C3D/9LHDK455XPIuW1Q7OGxBE5D7dK1xVMfNZm8Y++4YTo NySCVX2rxWEFKCok5johRxRcXfApJ6ZjJhSp1FCqYmzdOd1BmwNM+fYds9vqUom8D8qjVdEN RuKMwOkgN+FzjpZ4FKLioqoHMchciMYOlVRNM2GOV8hR8c3XNzEDvHuCw7KqbRb9OOlXdzip lcCe18rEjMs0AHFrrKZpzuNJs/WRS1BW6Ea977dCutqh5kHomnV77zjxHsSu1YaewW9Sr4Z2 2k2QffuKhKym2yZg+46koJFxpqGk0en1kJEPvSkPzVbUqD7Ygy9daq9y9kaBYtpIvmhztMMX 0WVMJcKDuP6z88HQ8jECF6TJraoVXgqRxxdEAb6SXfpjg/JIUzf5i1MV1r3QBrANyB1x3bMh DbsRer6yMs/ZtePw3eHNdFkpp1DUwmSCraiz+KEijAD+sNsT4M3oWJS2EwCkqfEQwKbJrD/z RHNogzFNtq+7+U3AUBhwx6Xnjd9i3YZsG9GIoNxVw79TWJkbuoD29xzBiM7R5gH49qjb6TDI GIoyxh0p2JbIy2GOQXVw5qj5z99rsT/KvEHm/lAr8hHcNIfs62kVhCKL2HbTM1fJE7Gt+Pb7 dMizvIpbutlOBdUOqKD6YcEicucae+/KJIAOkAcLNGqRuJf6riAf96VOh5WjYRxReg== Message-ID: Date: Sat, 23 Jun 2018 15:05:44 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <20180623025739.clijycvxkfskmmdy@proprietary-killer> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="y8fXnrskAFd86VoFtAirV1he9RynAOzMy" X-Archives-Salt: 4fb5524c-e99d-438e-be1a-5648fffbc06c X-Archives-Hash: 659bded23c13eabe29e3ff4d54d15fda This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --y8fXnrskAFd86VoFtAirV1he9RynAOzMy Content-Type: multipart/mixed; boundary="DERX0ZJwt8r1t7omZER3C1mjWyMsinFjd"; protected-headers="v1" From: Jonas Stein To: gentoo-dev@lists.gentoo.org Message-ID: Subject: Re: [gentoo-dev] Idea for a new project: gentoo-libs References: <20180623025046.djmsv44moxuqkv6t@proprietary-killer> <20180623025739.clijycvxkfskmmdy@proprietary-killer> In-Reply-To: <20180623025739.clijycvxkfskmmdy@proprietary-killer> --DERX0ZJwt8r1t7omZER3C1mjWyMsinFjd Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 2018-06-23 04:57, Marty E. Plummer wrote: > On Fri, Jun 22, 2018 at 09:50:50PM -0500, Marty E. Plummer wrote: >> So, as you may be aware I've been doing some work on moving bzip2 to a= n >> autotools based build. Recently I've ran into app-crypt/mhash, which i= s >> in a semi-abandoned state (talking with the maintainer on twitter atm)= , >> and I was thinking it may be a good idea to set up a project for keepi= ng >> these semi-abandoned and really-abandoned libraries and projects up to= >> date and such. >> >> Basically, an upstream for packages who's upstream is either >> uncontactable or is otherwise not accepting bug fixes and patches. So >> far I can only think of app-crypt/mhash and app-arch/bzip2 but I'm sur= e >> there are others in this state. >> > Or... call it proxy-upstream, to be in line with the current proxy-main= t > setup? Please do not call it proxy-*. The invented word proxymaintainer and proxiedmaintainer are not usefull. They get always mixed, and are not understood outside of Gentoo. assistant developer or trainee developer would have been much more useful= =2E Beside the naming I like the idea, that you want to take care for all abandoned libs. Please note, that you can not generate more manpower by creating a project. In 2015 I calculated =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D (Number of developers) / (Number of Projects) < 1.4 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D Which explains, why most projects today are run by mostly one active pers= on. If you find an important library, where upstream is dead, fork it and take responsibility for it. It makes no sense to make a pool of dead and important software and delegate the responsibility to a team where nobody really knows the software. Better pick a library, communicate with maintainers of the other distributions and fork it. Keep the library alive in the fork. It is important for the security to let dead projects die. --=20 Best, Jonas --DERX0ZJwt8r1t7omZER3C1mjWyMsinFjd-- --y8fXnrskAFd86VoFtAirV1he9RynAOzMy Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQKTBAEBCgB9FiEEBKx6IeHrw2Yc9cGSJwyHV7n+l/8FAlsuRahfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDA0 QUM3QTIxRTFFQkMzNjYxQ0Y1QzE5MjI3MEM4NzU3QjlGRTk3RkYACgkQJwyHV7n+ l/9OsQ/8CXuGIbAlj1etYH5W+xJLNSWh956FGQ12J1/yNKQ7B7hK25A4v+XSVUzU VfLQD2iaR+SSoKF1V6w21peNZwotYP8y6IBVgw6Wl9rHVjHf8QMqHizJ+6hN4zdG sN8xwNzFr9KcN2nGr1eYVhDrOmC4MHP3NfF42VLfinXJFsgtnJ7OuVKXZsU2VBLw 1tUbYOHzs0vS65G5+s49z6RKNJlC108ZG3OJCZqJfYX3ZcszHdFYUdQ8U3GCKM7T O7L5RmhQ/z2GF2jPGQPs/9+oMisSPD7g/ULm/PHmDReD4LXqVAN41AoAmoIKwJkI MAHJK/xcsHPL2ULSBRYKVYPYTS1Bo6rID0/d/m5Q1aQvILX/fOqhYS9QbLNwpiCi sjMGZJudkg522yE4aWhV5soJcLJeNHKkKstntn1QWyrgJuWfOZEziB1Jwc6O2Wxj hfRfl9z5AhI94vLLrJhRttteJb9gLefiWPRYSh9mJE9alOCQBiil4wzC4NkB6yNa tTIR0AOdxzRdieAE8Aj0aiM1Mj1WPkQAhoeb2c17/V5equy86vpoK80+31lIiWjh /7bNOWa0CZIT69trGAcC6KEv+UrAZrx9mCztzTeCmpcBxhLs6vdbQ0TQEcwdsUAt +nEfuXLnvdhCXCK8HTDFhnCSUCMnmteyAz1HXxNtLfyIkVh67Mw= =Lcoj -----END PGP SIGNATURE----- --y8fXnrskAFd86VoFtAirV1he9RynAOzMy--