Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:104010 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 44046 invoked from network); 2 Feb 2019 05:30:43 -0000 Received: from unknown (HELO mail-ot1-f53.google.com) (209.85.210.53) by pb1.pair.com with SMTP; 2 Feb 2019 05:30:43 -0000 Received: by mail-ot1-f53.google.com with SMTP id g16so7702229otg.11 for ; Fri, 01 Feb 2019 18:10:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=2SJo9tydsZH6W7dChCPX7XKBqmP0vUIDIwjT4Ck5Uv8=; b=Ni4VEohwkMJU+7umwZIB36ZLRk5lcfBY3lpdm6eBjhjP0vGWoG/Q85cZngSXM3jD4c mbT7tjK1SySO+2gLfbeQXx3jqV+tgDvMi4Bk33KTZgolWuADhTW31LUKvaG5OtWoei0y 9bpDxTdxWrPnPGFvVjQ7CzsmxT9FyXMXLtXVqw4NILAYg4EEtG7t96I8doK93K4HHq6A BhNIOVClWaEpcX1y9/Gr1aGLbYMr/SUu8o9jPVd7KWNOsRBuFE09CQa3sT0t/79j6kNj 9E+B3+YXNwUvTWHY7zVNmj9KUW2r1Oei6jhS40fG4UmMWIDEME81HzrhObXsbAm9LySv nX9A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=2SJo9tydsZH6W7dChCPX7XKBqmP0vUIDIwjT4Ck5Uv8=; b=PxYaJo9lNi/fSwJVMEB4K9Rnvvi3GQZ3Y1nGR2gV1nuFmEou98HLY9m22UVyWhuAO2 qweE72P+jSyfTkL8fVX4rsWJSa8zhDlqzbvRxF4A7/BB1TwCXnDaZS7oBPzZIV2ekd7a qZfna8UCtPp1cMyyryhov6cFqxQ1gBHngQyRTbTkZIqd4t6raDkLR9PNfJWz919iTZTn fCJIsucTMftbdOqj5LU1+dp5/LCwMoxEH9j6v4nvam0BS+TLaGoUAz7f53k6Q37iFB/L q0JrB0LsHYvUeyUiF4glOynzW8RzIOJ4HCLZiNUV8ZwbymSiwGJRTLS3tvacWpcIcJeu o5rQ== X-Gm-Message-State: AJcUukdnYGBLSFdvFQEjxn2qj/6FyZEsMZaxAWAUCyICa+Sno5yRYmgX TzSTFhnxCnt/co4hTOYIROMVWL0m5U6pEorZW+Q= X-Google-Smtp-Source: ALg8bN6xkrQBsfAP7Vg8rmAxpXtpxEGBlJyinuZ+fuFJOWQHtUluUGWgD0E0i8Wp3MtHL5i2UR6u3deATLaOBwTPsCM= X-Received: by 2002:a9d:70cc:: with SMTP id w12mr26494477otj.280.1549073459100; Fri, 01 Feb 2019 18:10:59 -0800 (PST) MIME-Version: 1.0 References: <7a909cd3-5d0f-8f2e-fba8-009778311bf0@php.net> <77f41814-bb27-bdf0-44d3-d59b64de7d45@librelamp.com> In-Reply-To: <77f41814-bb27-bdf0-44d3-d59b64de7d45@librelamp.com> Date: Sat, 2 Feb 2019 03:10:47 +0100 Message-ID: To: Alice Wonder Cc: Internals Content-Type: text/plain; charset="UTF-8" Subject: Re: [PHP-DEV] Disable PEAR by default From: peterkokot@gmail.com (Peter Kokot) > Many PEAR packages are maintained, and they are globally installed > meaning when a vulnerability is found, there is one to be fixed and > everything on the system is fixed. Which is great. Practice showed that global PHP packages are not that good actually and managing dependencies on a local level (per project) is much more scalable and overall better, but whatever works for your project. > Composer is like static linking compared to PEAR which is liked shared > linking. Composer can install things globally. I'm not sure I understand why is this even a discussion Composer vs. PEAR core installer script at the moment. The pull request is about disabling the PEAR option. Which I suggest to go further because, for example, waiting for a PHP 10 release for this step is really not a smart move for multitude of reasons... > So what problem is this really solving? Every PEAR issue actually that was caused in the several years. This time it was the each(), next version will be foo()... Not to mention that still there are bugs out there that are really painful to solve. For example, shared core (shipped) PHP extensions and PEAR is a no go without a patch. I mean if there are maintainers, and people who want to keep this PEAR in the php-src repository, fine I guess. But then I'm not sure what can be done here anyway... -- Peter Kokot