Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:125767 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id B9F821A00BD for ; Tue, 8 Oct 2024 09:47:12 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1728380969; bh=o7fclLjuS6J6xgzRLPmvNqLgMJqYjcOqfKxu9iVFqAw=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=XJiqhCkL9tfZNIfOh8C7zvwWuKCzDmUHvdbH9tbwrWpRBfT52BQL0OleQoUtPNClO ShUCbyUiLRUs6M4aaasqPqg90cTgFdCGS8eOL6uClI0KKBHwTKaR9pd8us0yq8dYPD w/A8y9+nsGpPYuf6fC38uXQmT34dkYUB0DrWShcFE1nELxT4I2jMt/u5siMnRRDVh3 hy+nHPdbaSzc77tmXJ219LVesGdLWc4JJvEpzavdxaJwget9jPYQ66ZCjeRYkXX5Vv V7Qxdr/okNIRiy394TZnrnd6Q3ZUenu7ehSLdDMrmP5AQ7jtmiBCOwHOmv8UwjBqqd joDdNcOLUUmVQ== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 90AD3180562 for ; Tue, 8 Oct 2024 09:49:28 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: * X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_50,DMARC_NONE, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS, HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-oa1-f41.google.com (mail-oa1-f41.google.com [209.85.160.41]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Tue, 8 Oct 2024 09:49:28 +0000 (UTC) Received: by mail-oa1-f41.google.com with SMTP id 586e51a60fabf-287d8f7493eso1431134fac.0 for ; Tue, 08 Oct 2024 02:47:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1728380831; x=1728985631; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=xK41bppJddodz9uEDYHuGmq3bjRO1mfkWOiMjW79YOo=; b=MVDmZ3Y1Dp++mjPRqw9aXDDGkn2cuZqjc6/PLssPsq+wwJ31jo2WFXTgaD3LidP9WG ls4hD3gYhldlWRcwcPKh6gA1nRVbFN/8I8UfkTeKbCv1I4TjwyVTmJqLeLA9RbyLU41/ qRMj0uMDBhQMuStI6OHIRD1w6eK6NZ4CexrUOJVc1koFM/PHfNzmGx9ZGRMR/uMaDqwx aU9K7tHenPVE1+WuKaIYVTjFan084zKyeZSDqkViyL1M3rZKCgmAALRaN0n9s/t6Y8xu Br6r7/LwfWRdzliwxhnrfVCvroG/uFFDWS7WsGO1WqdcN8EmklkFRGqi+2j6o7dx1JA0 FeZA== X-Gm-Message-State: AOJu0YxjEWW/FjM0RXDLY1/VvOpD72/EL6FrZPTPzGXc9OUTRX3QbUj8 X14070rpu63F2FXPkNY1z8XtvVEm8pNYrSxeu3JJ52z/zZB7sp7f15myPzhWKYl+bl315LTujIW TEXF1jtE8+bT2RZ9BhPgedi+84Jxq7mVX X-Google-Smtp-Source: AGHT+IGFm679o2Hd+8ReuoVP+UVbMG0HPVDGR8p2k37ihF+L9EoR7VcmTltoppEnSERR5rFKFlXSYrRhCChyVDRO0ZE= X-Received: by 2002:a05:6870:b48d:b0:277:f93b:2123 with SMTP id 586e51a60fabf-287c1dd48eamr10885111fac.19.1728380830802; Tue, 08 Oct 2024 02:47:10 -0700 (PDT) Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 References: <92b537ac-62f4-435c-bf55-07223cfa1915@app.fastmail.com> <4f4e3593-26c2-47c5-a7fe-130a8646081c@app.fastmail.com> In-Reply-To: <4f4e3593-26c2-47c5-a7fe-130a8646081c@app.fastmail.com> Date: Tue, 8 Oct 2024 10:46:59 +0100 Message-ID: Subject: Re: [PHP-DEV] [RFC] Policy on 3rd party code To: Jim Winstead Cc: internals@lists.php.net Content-Type: multipart/alternative; boundary="00000000000074e8ca0623f405b2" From: bukka@php.net (Jakub Zelenka) --00000000000074e8ca0623f405b2 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Oct 8, 2024 at 12:20=E2=80=AFAM Jim Winstead wrote: > On Mon, Oct 7, 2024, at 2:54 AM, Jakub Zelenka wrote: > > Hi, > > On Wed, Oct 2, 2024 at 7:38=E2=80=AFPM Larry Garfield > wrote: > > Since Jim's RFC proposal was criticized for being too vague, I hereby > offer a somewhat more prescriptive policy proposal on using 3rd party > code. (With JIm's blessing.) It's still more heuristics than rules, but= I > think that's the right approach generally. It also includes a voting > mechanism to resolve edge cases when they come up. > > I'm sure we'll bikeshed it to death, but please keep an open mind about > the concept in the first place. PHP is more than just php-src, and that'= s > a good thing. We need to catch up with that reality, while at the same > time maintaining a reasonable neutrality about projects Internals doesn't > manage directly. > > https://wiki.php.net/rfc/third-party-code > > > I think it would be better to have just a light RFC introducing the basic > idea and create a PR against policies repo because that's where the wordi= ng > matters. We should be really voting on those PR's rather than create poli= cy > RFC and then create PR that might have a different wording... > > > That would seem to be introducing a whole new process for making policy > changes, because right now there is no voting process for PRs for any of > the PHP organization repositories. > > Maybe policy RFCs like this should have accompanying implementation PRs > like many of the non-policy RFCs do, but I'm not sure that voting on PRs > for policy changes makes any more sense than voting on PRs for code chang= es. > > So there was already note about making changes to policy repo through RFC in https://wiki.php.net/rfc/policy-repository . Specifically > Changes to the policy repository should only be made through a new RFC, unless it is for fixing spelling mistakes or grammar. So I think any changes to the policy should link PR to the policy repo in the same way as we link implementation PR for other changes. What I wanted to say is that the actual wording should be discussed in the PR but just the main substance should be described in the RFC. The whole point of this policy repo is that we don't have to look to every policy RFC but to have a single place where all policies are defined. Regards Jakub --00000000000074e8ca0623f405b2 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Tue, Oct 8, 2024 at 12:20=E2=80=AF= AM Jim Winstead <jimw@trainedm= onkey.com> wrote:
On Mon, Oct 7, 2024, at 2:54 AM, Jakub Zelenka wrote:
Hi,

On W= ed, Oct 2, 2024 at 7:38=E2=80=AFPM Larry Garfield <larry@garfieldtech.com> wrote= :
Since Jim's RFC propos= al was criticized for being too vague, I hereby offer a somewhat more presc= riptive policy proposal on using 3rd party code.=C2=A0 (With JIm's bles= sing.)=C2=A0 It's still more heuristics than rules, but I think that= 9;s the right approach generally.=C2=A0 It also includes a voting mechanism= to resolve edge cases when they come up.

I= 9;m sure we'll bikeshed it to death, but please keep an open mind about= the concept in the first place.=C2=A0 PHP is more than just php-src, and t= hat's a good thing.=C2=A0 We need to catch up with that reality, while = at the same time maintaining a reasonable neutrality about projects Interna= ls doesn't manage directly.

=
I think it would be better to have just a light RFC introduc= ing the basic idea and create a PR against policies repo because that's= where the wording matters. We should be really voting on those PR's ra= ther than create policy RFC and then create PR that might have a different = wording...

That would seem to be introdu= cing a whole new process for making policy changes, because right now there= is no voting process for PRs for any of the PHP organization repositories.=

Maybe policy RFCs like this should have accompanying implementat= ion PRs like many of the non-policy RFCs do, but I'm not sure that voti= ng on PRs for policy changes makes any more sense than voting on PRs for co= de changes.


So there was already note about making ch= anges to policy repo through RFC in https://wiki.php.net/rfc/policy-repository . Specifical= ly

>=C2=A0=C2=A0Changes to the policy repositor= y should only be made through a new RFC, unless it is for fixing spelling m= istakes or grammar.

So I think any changes to the = policy should link PR to the policy repo in the same way as we link impleme= ntation PR for other changes. What I wanted to say is that the actual wordi= ng should be discussed in the PR but just the main substance should be desc= ribed in the RFC. The whole point of this policy repo is that we don't = have to look to every policy RFC but to have a single place where all polic= ies are defined.

Regards

= Jakub
--00000000000074e8ca0623f405b2--