Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:116390
Message-ID: <dde40b06-93c4-cb5b-0abf-48dfd8781fdf@telia.com>
Date: Mon, 15 Nov 2021 21:18:59 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
 Thunderbird/91.3.0
Content-Language: en-GB
To: Nikita Popov <nikita.ppv@gmail.com>,
 PHP internals <internals@lists.php.net>
References: <CAF+90c90pTtjxuMaQ88h+njhByfbv4qs=xx72CVPSw40tde6Cg@mail.gmail.com>
Reply-To: =?UTF-8?Q?Bj=c3=b6rn_Larsson?= <bjorn.x.larsson@telia.com>
In-Reply-To: <CAF+90c90pTtjxuMaQ88h+njhByfbv4qs=xx72CVPSw40tde6Cg@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [RFC] Migrating to GitHub issues
From: internals@lists.php.net ("Björn Larsson via internals")

Den 2021-11-02 kl. 15:19, skrev Nikita Popov:
> Hi internals,
> 
> The migration from bugs.php.net to GitHub issues has already been discussed
> in https://externals.io/message/114300 and has already happened for
> documentation issues.
> 
> I'd like to formally propose to use GitHub for PHP implementation issues as
> well: https://wiki.php.net/rfc/github_issues
> 
> Regards,
> Nikita
> 
Hi,

The current proposal is to move all new issues from bugs.php.net to
Github except security ones.

I think it's important to think a bit on what that means for reporting
security issues in the future. I mean, if we leave bugs.php.net to rot 
in the corner, what are the consequences for reporting security issues?

I think that aspect needs to be a bit further analysed like:
- Will this move have a negative impact on reporting security issues
   on bugs.php.net?
   # Both from a technical and people perspective.
- Can one assume that by bugs.php.net having probably even less
   attention, that reporting security issues will work as is?
- Is there an alternative for also handling security issues?

Think it would be good if the RFC could analyse that a little, besides 
saying business as usual for security issues.

Regards //Björn L