Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:125766 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id A7A8A1A00BD for ; Mon, 7 Oct 2024 23:32:49 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1728344105; bh=C1YTX80JiF3LR6F7McLOucfT2WyJ/hyV1ODSGaui1i8=; h=Date:From:To:In-Reply-To:References:Subject:From; b=JHOTRQlQOckGcVW4MZBI9o9KpycnunsUB97fQ+503Y1yU9fGuASXTyv5zyass9O4L eJP27nVaDXwPaE1AmbCtWcvWnHrmmtbRszdzE6zLq1GF5YuFPJp7GQXrVN8fzlhuTd oQXe5w5duFv91tVo3jMqlgv+cZ8/ThuOGhZ5Jrud4R5a1TYcxXrxv+WIK6Q9/WR/S3 T4SQ+6yXC2w6295TiqI2gfm4c9QSXlsFERPw4G0pajUua1ILSjwr6Wcz2Baukpv+KE 11EpmqIQMqMUGDhwORrci+0pujq8QvOxncZ6+3rc9dhBI/4tjTAjR8LdQvNILfFal+ sGg/LZ2iyW0OQ== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 12AB418004F for ; Mon, 7 Oct 2024 23:35:05 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from fhigh-a8-smtp.messagingengine.com (fhigh-a8-smtp.messagingengine.com [103.168.172.159]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Mon, 7 Oct 2024 23:35:04 +0000 (UTC) Received: from phl-compute-12.internal (phl-compute-12.phl.internal [10.202.2.52]) by mailfhigh.phl.internal (Postfix) with ESMTP id B24AD114013D for ; Mon, 7 Oct 2024 19:32:47 -0400 (EDT) Received: from phl-imap-07 ([10.202.2.97]) by phl-compute-12.internal (MEProxy); Mon, 07 Oct 2024 19:32:47 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= trainedmonkey.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to; s=fm2; t=1728343967; x=1728430367; bh=NQwqlNoaVC4R7HOY1AxUU 2MYmHLsED2RX5c2s0v1AZU=; b=Ij6OMwsLh//WiYBjVxvSOoslKeuVY33eLnYXP 3xR+d/aYGUbsWH3gS0pHSzIqtLsm8QW7L6mVDq4b6XpnVR8Wrr11aU6egT3JvdED nLlV0E3M+bBJfE8hJ7q09n4WoIP3/9fHIoYDz1P31u26V2J7iruH5CeHg9LLinMf vGGNw69Jo8Y0jFLCvTuysuNTAYX7XMnJjn36u91nm3RryV0aYOrN+wAZ66BhggfC xcGt322zv/VUElJcQicab1dvMNYjMm54YZMgxmgDvyLk4uCRQtdLm5GJ+2ELhLuZ vPpXm7CudWIJMlSKfVXVUpzTiRvUPxRvGZp6g5CQdkNB0mzSw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1728343967; x= 1728430367; bh=NQwqlNoaVC4R7HOY1AxUU2MYmHLsED2RX5c2s0v1AZU=; b=i NjWElyr5JRcU6dKQmusVW57YC0qkGvWTvVbLss0ePXmTLjSAIO0cXVzz8GhAAtLF 2hz9yx5v5AZNSRjv1k4ozLn10sN4Un587r57KfVdW6XCcSlLVYLMsGOjXuGROaNy J/efO7j7RomiZ0RAW/UyS1dx6YhteNQZPvyWPDeziv1NH1Ktg7lRQfONOIFBEytZ V18xN4VwOG3mnYabgd0hQrf+nROei43Q4TKqgnOc9OR3rShAp8dIhfvwA2fQaSF0 HEhxZZOjby14jC1uEVRbbsLcp+Vrc6EJtkh6asz8Saa01JxmHzQ1MTKQdk55s98J ImYWKH0yWlAIg3y69iaIQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrvdeftddgvdefucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpefoggffhf fvkfgjfhfutgfgsehtqhertdertdejnecuhfhrohhmpedflfhimhcuhghinhhsthgvrggu fdcuoehjihhmfiesthhrrghinhgvughmohhnkhgvhidrtghomheqnecuggftrfgrthhtvg hrnhepudfhgeehteetveeuffehhedtffevkedtjeehvdeuledvtdekieehvdevffeiteef necuffhomhgrihhnpegrghhilhgvrghllhhirghntggvrdhorhhgnecuvehluhhsthgvrh fuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepjhhimhifsehtrhgrihhnvggu mhhonhhkvgihrdgtohhmpdhnsggprhgtphhtthhopedupdhmohguvgepshhmthhpohhuth dprhgtphhtthhopehinhhtvghrnhgrlhhssehlihhsthhsrdhphhhprdhnvght X-ME-Proxy: Feedback-ID: ia2404087:Fastmail Received: by mailuser.phl.internal (Postfix, from userid 501) id F3EBABA006F; Mon, 7 Oct 2024 19:32:46 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 Date: Mon, 07 Oct 2024 16:31:55 -0700 To: internals@lists.php.net Message-ID: <60dd81ad-7232-48a4-b419-48066bf15197@app.fastmail.com> In-Reply-To: <1E3250E0-17C7-4BCD-9A5F-7F2FED48686D@newclarity.net> References: <92b537ac-62f4-435c-bf55-07223cfa1915@app.fastmail.com> <1E3250E0-17C7-4BCD-9A5F-7F2FED48686D@newclarity.net> Subject: Re: [PHP-DEV] [RFC] Policy on 3rd party code Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: jimw@trainedmonkey.com ("Jim Winstead") On Sun, Oct 6, 2024, at 12:33 PM, Mike Schinkel wrote: >> On Oct 2, 2024, at 3:36 PM, Andreas Heigl wrote: >> IMO the PHP website is more or less a bunch of static pages. There is= not really much interaction necessary. So having a framework might not = necessarily be The Thing. > > You may be confusing cause with effect. =20 > > IOW, given that all the current infrastructure really supports are=20 > static pages =E2=80=94 without a gargantuan effort to write and mainta= in a=20 > custom framework from scratch by unpaid volunteers =E2=80=94 the resul= tant=20 > website can only realistically be static pages.=20 > > Frankly, I envision the PHP website could be so much more if developin= g=20 > and maintaining it were not a gargantuan effort. Like WordPress' plugi= n=20 > and theme repositories, PHP could have a database of *all* third party=20 > offerings =E2=80=94 minus any objectively determined bad actors =E2=80= =94 and showcase=20 > to the world all that the extended PHP community has to offer. Developing and maintaining the PHP websites is far from a gargantuan eff= ort, as evidenced by how it is currently (and has long been) maintained = on a very ad-hoc basis by a very small number of volunteers with some wo= rk that is now sponsored by the PHP Foundation. (I believe that amounts = to maybe the equivalent of one full-time person.) I think a proposal for the PHP project taking on something like centrali= zed databases of "all" third-party packages also needs to come up with a= very good rationale as to why that will turn out differently than how P= EAR and PECL did. (And I think that "minus any objectively determined bad actors" is hand-= waving away some extremely hard non-technical issues.) > Or, imagine a store where PHP could sell T-Shirts, plushies and more,=20 > all to fund more core development? I have a hard time imagining that this would ever be more than a roundin= g error compared to the sponsorships and individual contributions that t= he PHP Foundation currently relies on. >> On Oct 5, 2024, at 10:25 PM, Larry Garfield = wrote: >>=20 >> A number of people are concerned that if we use any of the "Big Names= ", it would be interpreted as an endorsement of that project. Eg, if we= rebuilt the main website using Laravel, the Symfony folks would feel sl= ighted. If we used Symfony, the Laravel folks would get rather cross. = If we used Yii, the Slim folks would get upset. If we used Drupal, we'd= get constant "well why not Wordpress?" questions. Etc. > > OR, we could change the current model and consider and another approac= h. > > Instead of maintaining a website based on 1980s[1] technology which ca= n=20 > give newer developers who are interested in modern developer tools the=20 > opinion that PHP is not for them, PHP could move to a model for its=20 > website where it embraces "Big names" and does so on merit. > > What do I mean by "merit?" =20 > > Consider the potential of adopting a new approach where PHP puts out a=20 > call for RFPs to any and all who are interested in submitting a=20 > proposal to build and maintain a website for PHP for three (3) years a= t=20 > a time.=20 > > Interested stakeholders could join the PHP internal infrastructure=20 > mailing list and brainstormwhat is wanted tor the website and then=20 > prepare an RFP to put out for bid. Nominally we would do so without=20 > paying for the service =E2=80=94 their benefit would be getting promin= ently=20 > featured as the developer and maintainer of the website =E2=80=94 but = we could=20 > ask organizations in the community like JetBrains to pitch into a pot=20 > that could go to the winner of the bid, if we want to. > > Then we take proposals from the projects themselves, any agency, and/o= r=20 > any other organization that want to propose and we have the members of=20 > the PHP internal infrastructure mailing list create a short list of th= e=20 > proposers based on criteria such as if we think they will be able to=20 > maintain doing so for a 3 years as well as what they actually propose,=20 > and finally have all voting members would vote on it. > > Why would we do it his way? Because this is how web development for=20 > organizations usually gets done today. I was involved in a agency=20 > project back in probably 2017 to build the website for the Agile=20 > Alliance (www.agilealliance.org). Certainly they had community members=20 > that could have built it but they chose instead to have it done by=20 > deciding what they wanted and they putting out an RFP. The result was=20 > they actually got the features they wanted in the near term instead of=20 > looking back 10 years or more thinking "When we can get around to it w= e=20 > can implement...whatever." > > We would want to start this process well in advance to ensure enough=20 > people know about it and how time to submit a proposal =E2=80=94 e.g. = 18=20 > months? =E2=80=94 and that the RFP process for 3 years later would sta= rt a year=20 > after the site is launched. I can imagine that a lot of PHP-focused=20 > YouTubers would be all over promoting this. > > Then the unpaid volunteers here need not be as highly skilled nor as=20 > burdened to maintain all the technical infrastructure and can instead=20 > focus on maintaining the actual **content**.=20 > > The concern for bias also gets thrown out the door because it is based=20 > more on merit, and the decision is widely distributed across all the=20 > voting stakeholders in PHP in a relatively transparent process. We=20 > could even say that any framework used for the last 3 years cannot be=20 > awarded the winning bid for the next 3 years to give more "big names"=20 > as shot at being the framework chosen. > > There are tons of details that would need to be worked out, but as thi= s=20 > is a wildly different approach from any the community has taken in the=20 > past =E2=80=94 although as I said this is the common approach organiza= tions=20 > take today to build and maintain websites =E2=80=94 if it gets shot do= wn by too=20 > many then no need to discuss the details any further. Frankly, I find your proposal dubious because it assumes that there is s= ome body of "interested stakeholders" who are going to be able to come = to an agreement on an RFP that can then be used to enable a unbiased, me= rit-based selection by a vote of the voting members. It assumes that somehow assembling all of the organizational infrastruct= ure to enable outsourcing the technical infrastructure is solving the ea= sy part of the problem. It assumes that there is some need for non-static-pages with content tha= t will somehow come pouring forth out of less-highly-skilled unpaid volu= nteers if only the technical infrastructure was taken care of for them. What is currently blocking content that at least one unpaid volunteer* w= ants to contribute in a way that leverages the existing technical infras= tructure is that there is vague, unwritten policy that we don't mention = third-party tools in the PHP documentation, except for all of the third-= party tools that we already mention in the PHP documentation. Jim * It's me, I'm the problem.