Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:114308 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 31128 invoked from network); 9 May 2021 08:09:42 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 9 May 2021 08:09:42 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 14EE01804B5 for ; Sun, 9 May 2021 01:16:56 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.2 X-Spam-Virus: No X-Envelope-From: Received: from mail-oo1-f43.google.com (mail-oo1-f43.google.com [209.85.161.43]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sun, 9 May 2021 01:16:55 -0700 (PDT) Received: by mail-oo1-f43.google.com with SMTP id o202-20020a4a2cd30000b02901fcaada0306so2864093ooo.7 for ; Sun, 09 May 2021 01:16:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=VWQyEFSUkZygXTCJKhZwSFccvz+PoKdAPkLjNUl2hoE=; b=FKr4q+4V6mSFm3ED+nxuzl+qQJUSC+NjdRrhreulMrRSo69/CmIGa50EEIH59/B5ad dsyczdnXBPKKqqgMOoC0Po01AHibv1WO7w/BRa9YFhsgs5GYlYFlYH1rywBHzGjYcHiL bx55qSUc4uJt9rUxh3BcFpw8tksGPkBmShzQ3XoEQt0PTgyZEb+n4Ki1CAoaseskkaKO JvKPNtu0oZ+3Em4lm1LmrVIe2Y9j+734kq3Bn9w7lJapfE+p6v1UAs7D6002SCqjsofx ecmOctlwpwtMh+W34D6cJGoOlPoQHsMo1DNCoC/IKWHIAC96DHg2vbQbiasQEsKmbKQr 1jzw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=VWQyEFSUkZygXTCJKhZwSFccvz+PoKdAPkLjNUl2hoE=; b=iWlvm7kg9t4hrLX9KzcEF985OExD3peDViQ8hY8bvX5bt8eJN2yKlvls17LYQ51RI0 5QvFyxDQ5DHaGOBnr4BC8zOQygNAUruw8LYIuiN18e+1SVk3K93kJY7c2xdkOR2t4F2a 7XK87uaB+ZMu6f9qJAah376B71EqAJX425dhOD39VbRDPVCHK4xmuJiCkjvfZ4iRnlxo +duVRS8gl08ahqoLuveeoM0AwwYtofdwDufVmPCz4GSvYzvhTlsda+UNv2DJWsvtLPeg TgemHT5pKZt9ThCt/wm0ag/JxwzGNYn6ZoE4Zw6RplSWTrhEEvAp5DMQrFzD3AZpbkya cCCg== X-Gm-Message-State: AOAM533enCXH4NW5sOGM0r7ybdiO8EsjAZ/HNngxN0ScA4/BU03pvBre ICXfifrhTZB5BqiTvqQKiuNZtukBc+6tZYkSjAyyCtZmfT1Zwg== X-Google-Smtp-Source: ABdhPJyglj5E1hotOf1mvCVK+YAReGal/huL/6CuZGipGKd1Lbdgo+sNVCnrr9F9wkhYS5ihu5a1cqjQQ2Zgjb1EH+I= X-Received: by 2002:a4a:33cc:: with SMTP id q195mr11875888ooq.22.1620548213268; Sun, 09 May 2021 01:16:53 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: Date: Sun, 9 May 2021 10:16:42 +0200 Message-ID: To: Andreas Heigl Cc: PHP internals Content-Type: multipart/alternative; boundary="00000000000097e51505c1e1487b" Subject: Re: [PHP-DEV] Re: Bugsnet From: krakjoe@gmail.com (Joe Watkins) --00000000000097e51505c1e1487b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi all, I shouldn't have said we can "just" move ... I'm not supposing it will be easy. We can "just move", in about the same sense that we can "just move" today. Considering the difficulty of problems we do not currently have is a waste of time. Cheers Joe On Sun, 9 May 2021 at 10:08, Andreas Heigl wrote: > Hey folks: > > Am 09.05.21 um 09:33 schrieb Stanislav Malyshev: > > Hi! > > > [...] > > > > 1. Bug reporting templates> 2. Pre-filter on reported bugs> 3. Advanced > search > > 4. Custom fields like PHP version or CVE ID > > 5. Private bugs that are accessible only to members of security team > > 6. Custom statuses (I guess can be worked around with labels, but would > > require a lot of work to make it convenient to use, default screen woul= d > > be pretty much unusable due to clutter, as it only understands > closed/open) > > 7. Ability for anybody to submit a bug without opening github account > > (yes, I know it also produces the spam problem) and assigning bugs to > > people that don't have github account (we still can accept patches from > > those, can't we?). > > 8. Statistics > > > >> It may be over optimistic, but we might get better engagement with > >> bugs on github than anywhere else also - Github is where people are > >> tending to do their business today. > > > > I think it's way to generic statement. Some people choose github for > > doing some stuff would be more accurate. I don't think I can remember > > from the top of my head any major project that uses Github as their mai= n > > bug tracker. Maybe they exist, but I certainly can't recall any. > > > >> Github is maintained, hosted, developed, and free, and while it isn't > >> the perfect tool for the job, nothing else is either. We could spend > >> time (which we don't have) developing bugsnet, or installing some > >> other solution in a dark corner of the internet, and solve no problems > >> at all, and be burdened with the ongoing maintenance of that solution. > > > > Why we must install it in a dark corner? Maybe we should ask for some > > help from people who are willing to contribute before we decide to scra= p > > the whole thing. > > > > Besides that, I am not sure I am feeling that comfortable with moving > > 100% of the infrastructure of the PHP project to a platform wholly owne= d > > by Microsoft, and that's where things seem to be heading. I know > > Microsoft is almost not evil now, and it has no problem with PHP > > whatsoever, but things change, and who knows what would happen in > > another 5-10 years. I am not sure hard-binding the whole project to a > > single platform owned by a single company is that great. Due to the > > distributed nature of Git, the repository hosting is very low risk - it > > could be easily moved anywhere. But having the rest of the > > infrastructure in a single point of failure does not feel great. Once w= e > > move in there, it would be very hard to move out. > > This is for me the most interesting point. While it is rather easy to > move fastly away from Github with the source-code it will be much more > complicated to move to "somewhere else" with all of the issues. > > Yes, we currently have the same problem with PRs but not "owning" our > bug-report system feels ... not right to me. Especially when there is no > way to actually turning it off due to the security bugs. > > While on the other hand I think it absolutely great to have another > infrastructure part that we do not have to maintain! > > My prefered way to go would be some other bug-reporting SaaS that can > integrate with github but can provide some more of what we currently > have and that also allows us to also use it for security related issues. > > Just my 0.02=E2=82=AC > > Cheers > > Andreas > > -- > ,,, > (o o) > +---------------------------------------------------------ooO-(_)-Ooo-+ > | Andreas Heigl | > | mailto:andreas@heigl.org N 50=C2=B022'59.5" E 08=C2=B0= 23'58" | > | https://andreas.heigl.org https://hei.gl/where | > | https://hei.gl/pubkeyandreas | > +---------------------------------------------------------------------+ > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: https://www.php.net/unsub.php > > --00000000000097e51505c1e1487b--