Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:121987 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 78114 invoked from network); 11 Dec 2023 16:55:31 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 11 Dec 2023 16:55:31 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 89552180003 for ; Mon, 11 Dec 2023 08:55:46 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,FREEMAIL_FROM, HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-pj1-f47.google.com (mail-pj1-f47.google.com [209.85.216.47]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Mon, 11 Dec 2023 08:55:46 -0800 (PST) Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-28a1625b503so4177621a91.2 for ; Mon, 11 Dec 2023 08:55:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1702313729; x=1702918529; darn=lists.php.net; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=4y9VgwIwWtRk8fxG2P9jGeUZURfsExGDhADOoCbEOYw=; b=eWOcR35FL/LD+gKqC7w2v6qKHZdBBnHiSeTSy4m4+pEYrk0zCdnCTGMpK8aTpBxL6P 707obtws5Ip4cGXB6wbZe3UiOB7I6sVkz1G0+6KfT78Dj2yi9kaWpN1sPBofuKAqtNP6 z5RB9RpaxpCrkOCrGU5eSmrXKM+8NTB5+5+Xe4xUnMXEYo8VrXPxpuQjcZEiMOvWf0K1 G2zI5Gw5vMwZSJ96i0y4yl1CK1XM540MXMOQ7CElNAdMQ2fLt6Fn+WiPX5dWrRsGzOM/ 9A3aiZGNw29rYrIf/u6lH2B1GjvyZ44UIS5FquIUx1735lv89LKGavpScdKez0Zo4O/U RXdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1702313729; x=1702918529; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=4y9VgwIwWtRk8fxG2P9jGeUZURfsExGDhADOoCbEOYw=; b=nwQy4G4aTB4Wg3q8y1AYOGbE+lYwynv3MwzBKihOipHISnpWau0dqSLDQsdTI3EKNf iKz6vF+6mVw5YYfWq4i2At59e4yxX5xH1zFqKPB9PK4sfot+ku7WNFTaWTqZYR2NJ5QF SK60vDlcOo88P4J0pV0+p2r/paNyz5dzPOtqvEwHoFzly+btpq0hUKc1y3MP0mFgmpCC KsVBEIMCpqx76yxFf6R0b9i+M0TjHcFSuvPwjUl/vjo3w9HudlKq5G5QYLDBSJhBvMY1 8UaUp7XYheLkODOwWixkLvq26UCk5U1bX6j6XW77krByNtiW3RB0WlI+4DiKJajHPSZ0 B3dA== X-Gm-Message-State: AOJu0YwudblI/nI0UcQ6FB0XqgCsJan85Sd8UfF4qO3mkTUuC9JPyUDT dc8QlbJIT/9izfQrbfyK1GI6U3R5OBYjik4zxO8npRUG X-Google-Smtp-Source: AGHT+IHX7CuHd+0qL+t95f8jmfTPkidW2zgQVQG1AqEUuWiwfpNfykDjqzkfhwWYN4rrhtCCV37n28vYoZY1COxlig8= X-Received: by 2002:a17:90b:4d09:b0:285:9803:2015 with SMTP id mw9-20020a17090b4d0900b0028598032015mr4030284pjb.23.1702313729177; Mon, 11 Dec 2023 08:55:29 -0800 (PST) MIME-Version: 1.0 References: <8d4bcca5-a2ce-5ee1-1aed-02076539433a@php.net> <0b25cbe2-1986-c499-defc-a556114853df@php.net> In-Reply-To: Date: Mon, 11 Dec 2023 23:55:16 +0700 Message-ID: To: Larry Garfield Cc: php internals Content-Type: multipart/alternative; boundary="0000000000001fbda4060c3ecd66" Subject: Re: [PHP-DEV] New "PECL" From: pierre.php@gmail.com (Pierre Joye) --0000000000001fbda4060c3ecd66 Content-Type: text/plain; charset="UTF-8" On Mon, Dec 11, 2023, 11:21 PM Larry Garfield wrote: > On Mon, Dec 11, 2023, at 9:46 AM, Derick Rethans wrote: > > > Yeah, I understand. And I feel the same. But if there is no registry (a > > goal), then there is no way to find out which of your extension version > > support a specific PHP version, without checking every tag in your > > repository. That's not going to be fast. > > > > cheers, > > Derick > > See, I think I disagree on this point. Having a registry is table-stakes > for package managers these days. Composer, npm/yarn, whatever Python does > this week, Cargo, Bundle, Maven/Gradle... a packager isn't complete without > a registry. The one exception is Go, and its approach is... just a mess, > frankly. > > Whether PECLtng piggybacks on Packagist, self-hosts using something like > Satis, or does a home-grown thing, I don't think a neo-PECL without a > registry is a viable and sustainable way forward. That needs to be in the > initial design. > hi Larry, you are fully right here. On top of the already mentioned points, it brings visibility to extension packages, which is a key factor to adoption at large. It also helps for an automatic builds. A service is also a must for automatic releases/triggers builds. You can see this service with a github tag hook on pickleweb. It is also quite a good thing to automate dependencies management. It could be relatively straightforward to update them per distros, or windows (see my earlier post, already managed using windows. php.net data). Also without the services (implemented but no public packagist for extensions yet), I think pickle already does 95% of it (including local windows builds). Adding signature is relatively simple. Important note, during pickle development, the number 1 request was to be fully integrated with composer. it was not possible until composer v2, plugin and custom tags. Given that composer is the only used package manager , it should be the way to go. To create something from scratch without taking these points into accounts can only lead to a sub optimal solution. There are also development environments tools out there which could provide relatively easily per project extensions management (either cli or pools). PHP is not my primary platform anymore, business wise, however I am happy to help if desired. I can only, with a diplomatic emphasis, suggest to the author to understand where the php ecosystem is (or was 3 years or more ago). best, Pierre > --0000000000001fbda4060c3ecd66--