Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:125734 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id B113B1A00BD for ; Wed, 2 Oct 2024 19:17:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1727896808; bh=xlrjeH+aSuxpcNgnoOwkDwOM9/CTLse75l5bZ4Fa1WU=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=FVvz7nhjXx+dEC6juhS9MWyoZUF38ZQVSxQrLBC2o34aLcJDdy0bRE+GbdUOEm/Tv ee3d6zFnEfb5hlc7WI1ZGuhhr7NaCjoV9wmJTsTzyzMAkgSZV49uSMXel79XkN3ySD 4ZfFhc8cJy/QJFS+uMefhzej0KPjU0sWJFvWGGdRD86GPVrK0arQuHMrusGidx2jKF xXOKzh0YudqGJ3aIm4+ojm2+X0uUlNpKdpY2mib8zJ9FOblnDaezXt/CzcgyhzNJCE Mzq7q70C0rURNlYHjm6DoAziM5kAbzDSVSZR/kDMDGkguWBVVnn79nZedKOXFXLbby lAGPXwlp6RQhA== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 5B636180042 for ; Wed, 2 Oct 2024 19:20:08 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,FREEMAIL_FROM, HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-yb1-f176.google.com (mail-yb1-f176.google.com [209.85.219.176]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Wed, 2 Oct 2024 19:20:05 +0000 (UTC) Received: by mail-yb1-f176.google.com with SMTP id 3f1490d57ef6-e2636cf9a3cso14087276.1 for ; Wed, 02 Oct 2024 12:17:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1727896671; x=1728501471; darn=lists.php.net; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=N3n5wVBP982t3I/pVAUxh98PuaGjgPSaLT0InuitY34=; b=Ti3oFbsGyM+9MK7k1AIRksmfqNkfK9drk7MROW1UmG5Pgob7quyET9WhkSC9yOJjGy UGd6YJC/k37aqqYjDidMYw1dggwqGIxAwgJ/FYm8P4tOv33Q7SQcvBEHM50mogyOdhrR vJgWFFCyDZMK8as2Aat4gPyKW0wHpONBdxPddI9x8vF53uKiWNMyEKhhMfblu/k67hXu ziUbKvJJyNg1J20PkG4wjHdhKVrldWSVaoLF06oG+8BGQR0Boh4evKR5FlrI5xQPWzgG xTTjhjiSeMfrF/iEmjhuquTidRmswfq5mHZA1VUoD4fDs+vvRTkEuhUDMeDUiU/Du0vA D2Xg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1727896671; x=1728501471; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=N3n5wVBP982t3I/pVAUxh98PuaGjgPSaLT0InuitY34=; b=OzOUDLEYtSEVg7GZXtbUCm+X8xCo1hp0Gd5esiXCZRJGRgYxrzaaaY2USXmhvaP5jC he7MJMpkCkZLa6+3sT0vZimXLKW+f2SIVsBbv3GgvZItDCdDHCGZzHr5VANLQUMTeF+0 2N6TM0n21iQoVFiz+Ym8qCIx+Zw4n1+aLLEJiRk9mDO/0rxm2EwF3MJUfNAEVrR7cBJB rGnhZaKdqbZHIkEcp4/va4p763MdlLyrP4gL3kN6PHCxMuohXCl0KX27AHWRAHNwQtNM peRjicooprbND/CLLgOiKnfqPq376G3KLK16ewo2+9V7RAQYACouvidVxcdHY3yaK7Qx hRpQ== X-Gm-Message-State: AOJu0YzyRK6VGOUcTLpWKJuJEZnomVaVrFUphd1cJqjzrG4mDK7gA3IP lBiRD2o80AQ+MlFCp+nGD0HDWJqZ5wVCVXLYEh03YoBGiGDoA97YCMdmEKKPt24I5fY5nn34Kor LYWQ2ErLhnV/TTQs/oXuU4tWPX1ji/+OPAPQ= X-Google-Smtp-Source: AGHT+IFxJUyr3WQgCiOfAm6ne/U+6Jjpduz30eP3L9CeN4MhgsAoPQcSmCJZNpAzAHNiuMSqB2czFxe+RbHaItYGEOo= X-Received: by 2002:a05:6902:2e09:b0:e25:e02e:7886 with SMTP id 3f1490d57ef6-e2638470d17mr1572556276.11.1727896671000; Wed, 02 Oct 2024 12:17:51 -0700 (PDT) Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 References: <92b537ac-62f4-435c-bf55-07223cfa1915@app.fastmail.com> In-Reply-To: <92b537ac-62f4-435c-bf55-07223cfa1915@app.fastmail.com> Date: Wed, 2 Oct 2024 16:17:14 -0300 Message-ID: Subject: Re: [PHP-DEV] [RFC] Policy on 3rd party code To: Larry Garfield Cc: php internals Content-Type: multipart/alternative; boundary="00000000000048a3ae0623834bbc" From: deleugyn@gmail.com (Deleu) --00000000000048a3ae0623834bbc Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Oct 2, 2024 at 3:38=E2=80=AFPM Larry Garfield wrote: > Since Jim's RFC proposal was criticized for being too vague, I hereby > offer a somewhat more prescriptive policy proposal on using 3rd party > code. (With JIm's blessing.) It's still more heuristics than rules, but= I > think that's the right approach generally. It also includes a voting > mechanism to resolve edge cases when they come up. > > I'm sure we'll bikeshed it to death, but please keep an open mind about > the concept in the first place. PHP is more than just php-src, and that'= s > a good thing. We need to catch up with that reality, while at the same > time maintaining a reasonable neutrality about projects Internals doesn't > manage directly. > > https://wiki.php.net/rfc/third-party-code > > *Puts on trusty flame-retardant suit* > > -- > Larry Garfield > larry@garfieldtech.com > Good writeup. Although I was more of a fan of Jim's RFC which just targets the main issue of bringing up in the mailing list that PHP cannot use X because "endorsement", this is also a good alternative. My only problem with it is in the "discussion" section: Symfony, Laravel, Slim, Yii,WordPress, Drupal, TYPO3, etc. - While Laravel > and Symfony are the market leaders in PHP frameworks, and WordPress > dominates the CMS-oid market, it is a highly dynamic market, with literal= ly > dozens of players that have reasonable use. That makes listing them in th= e > documentation without =E2=80=9Cplaying favorites=E2=80=9D essentially imp= ossible, and > therefore none should be listed by name. They should also not be used > directly to build any PHP tooling, again to avoid the appearance of > endorsement. However, it may make sense to list several of them in passin= g > in marketing material, explicitly noting that they are just some among ma= ny > options. It's 2024. If the foundation is hiring developers to improve the language across the board (internals, docs, website, processes, marketing, visibility, etc), it makes no sense that these folks (or any volunteer for that matter) be explicitly and unquestionably denied the opportunity or conversation to modernize the system which PHP tooling is built upon. Its understandable for historical reasons that frameworks would come and go, which is why a lot of PHP systems from the 2005-2015 era usually are built with an in-house framework. But at least in my little personal context, in-house frameworks have proved themselves to be a nightmare for PHP software engineers at large. A lot of these market leaders open source frameworks are sustainable companies with a decade of proven stability, reliability and efficiency. The sole principle behind a framework is to facilitate work and this discussion point makes a clear statement that work cannot be facilitated. I am very opinionated on what is the best tool to help build PHP tooling, but it seems pretty clear to me that any framework would be better than no framework because the alternative is that a framework will be built in-house and nobody in the world will have prior experience with that one. --=20 Marco Deleu --00000000000048a3ae0623834bbc Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Oct 2, 2024 at 3:38=E2=80=AFP= M Larry Garfield <larry@garfie= ldtech.com> wrote:
Since Jim's RFC proposal was criticized for being too vague,= I hereby offer a somewhat more prescriptive policy proposal on using 3rd p= arty code.=C2=A0 (With JIm's blessing.)=C2=A0 It's still more heuri= stics than rules, but I think that's the right approach generally.=C2= =A0 It also includes a voting mechanism to resolve edge cases when they com= e up.

I'm sure we'll bikeshed it to death, but please keep an open mind a= bout the concept in the first place.=C2=A0 PHP is more than just php-src, a= nd that's a good thing.=C2=A0 We need to catch up with that reality, wh= ile at the same time maintaining a reasonable neutrality about projects Int= ernals doesn't manage directly.

https://wiki.php.net/rfc/third-party-code

*Puts on trusty flame-retardant suit*

--
=C2=A0 Larry Garfield
=C2=A0 larry@ga= rfieldtech.com

Good writeup. Although I was more of a fa= n of Jim's RFC which just targets the main issue of bringing up in the = mailing list that PHP cannot use X because "endorsement", this is= also a good alternative.

My only problem with it is in = the "discussion" section:

Symfony, Laravel, Slim, Yii,WordPress, = Drupal, TYPO3, etc. - While Laravel and Symfony are the market leaders in P= HP frameworks, and WordPress dominates the CMS-oid market, it is a highly d= ynamic market, with literally dozens of players that have reasonable use. T= hat makes listing them in the documentation without =E2=80=9Cplaying favori= tes=E2=80=9D essentially impossible, and therefore none should be listed by= name. They should also not be used directly to build any PHP tooling, agai= n to avoid the appearance of endorsement. However, it may make sense to lis= t several of them in passing in marketing material, explicitly noting that = they are just some among many options.

=
It's 2024. If the foundation is hiring developers to improve= the language across the board (internals, docs, website, processes, market= ing, visibility, etc), it makes no sense that these folks (or any volunteer= for that matter) be explicitly and unquestionably denied the opportunity o= r conversation to modernize the system which PHP tooling is built upon. Its= understandable for historical reasons that frameworks would come and go, w= hich is why a lot of PHP systems from the 2005-2015 era usually are built w= ith an in-house framework. But at least in my little personal context, in-h= ouse frameworks have proved themselves to be a nightmare for PHP software e= ngineers at large. A lot of these market leaders open source frameworks are= sustainable companies with a decade of proven stability, reliability and e= fficiency. The sole principle behind a framework is to facilitate work and = this discussion point makes a clear statement that work cannot be facilitat= ed.

I am very opinionated on what is the best tool= to help build PHP tooling, but it seems pretty clear to me that any framew= ork would be better than no framework because the alternative is that a fra= mework will be built in-house and nobody in the world will have prior exper= ience with that one.

--
Marco Deleu
--00000000000048a3ae0623834bbc--