Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:107202 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 68567 invoked from network); 18 Sep 2019 15:44:40 -0000 Received: from unknown (HELO php-smtp3.php.net) (208.43.231.12) by pb1.pair.com with SMTP; 18 Sep 2019 15:44:40 -0000 Received: from php-smtp3.php.net (localhost [127.0.0.1]) by php-smtp3.php.net (Postfix) with ESMTP id 82AD12D19AB for ; Wed, 18 Sep 2019 06:22:04 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp3.php.net X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,SPF_HELO_NONE autolearn=no autolearn_force=no version=3.4.2 X-Spam-ASN: AS31103 84.19.160.0/19 X-Spam-Virus: No Received: from mail.experimentalworks.net (mail.experimentalworks.net [84.19.169.162]) by php-smtp3.php.net (Postfix) with ESMTP for ; Wed, 18 Sep 2019 06:22:04 -0700 (PDT) Received: from maniacmansion.fritz.box (ppp-188-174-61-13.dynamic.mnet-online.de [188.174.61.13]) by mail.experimentalworks.net (Postfix) with ESMTPSA id B4C746CBB6; Wed, 18 Sep 2019 15:22:02 +0200 (CEST) Message-ID: To: "Christoph M. Becker" , Arnold Daniels , internals@lists.php.net, Anatoliy Belsky Date: Wed, 18 Sep 2019 15:22:02 +0200 In-Reply-To: <51d2093d-7ad5-c50e-0a33-1b088b891223@gmx.de> References: <61ab41b2e7eb74c23bc0dc4a307d1045863966fc.camel@schlueters.de> <51d2093d-7ad5-c50e-0a33-1b088b891223@gmx.de> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.28.5-0ubuntu0.18.04.1 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Envelope-From: Subject: Re: [PHP-DEV] Changing PECL signup flow. From: johannes@schlueters.de (Johannes =?ISO-8859-1?Q?Schl=FCter?=) On Mon, 2019-09-16 at 11:13 +0200, Christoph M. Becker wrote: > > For the record, there is already > , but that project looks like > it has fallen asleep. > Right and contrary to the old PECL/PEAR tool this can also fetch the precompiled Windows binaries afaik. The Windows builds are also a relevant factor in the discussions regarding the PECL site. Afaik (Anatoliy and others know better than me) packages uploaded to the pecl site are being built in the same setup as our official PHP runtime Windows builds. Not sure how well that image is protected against bad actors doing nasty stuff in their build scripts. Thus some oversight about who can push code up there might be good. johannes