Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:125769
Feedback-ID: ia2404087:Fastmail
Precedence: bulk
MIME-Version: 1.0
Date: Tue, 08 Oct 2024 15:40:26 -0700
To: internals@lists.php.net
Message-ID: <0737bbf0-a3ea-4d51-a9dd-aece0c3f3948@app.fastmail.com>
In-Reply-To: <92b537ac-62f4-435c-bf55-07223cfa1915@app.fastmail.com>
References: <92b537ac-62f4-435c-bf55-07223cfa1915@app.fastmail.com>
Subject: Re: [PHP-DEV] [RFC] Policy on 3rd party code
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: jimw@trainedmonkey.com ("Jim Winstead")

On Wed, Oct 2, 2024, at 11:36 AM, Larry Garfield wrote:
> Since Jim's RFC proposal was criticized for being too vague, I hereby 
> offer a somewhat more prescriptive policy proposal on using 3rd party 
> code.  (With JIm's blessing.)  It's still more heuristics than rules, 
> but I think that's the right approach generally.  It also includes a 
> voting mechanism to resolve edge cases when they come up.
>
> I'm sure we'll bikeshed it to death, but please keep an open mind about 
> the concept in the first place.  PHP is more than just php-src, and 
> that's a good thing.  We need to catch up with that reality, while at 
> the same time maintaining a reasonable neutrality about projects 
> Internals doesn't manage directly.
>
> https://wiki.php.net/rfc/third-party-code
>
> *Puts on trusty flame-retardant suit*

Some additional libraries that could probably be added to the list of pre-approved libraries for PHP tooling because they're already being used:

* michelf/php-markdown (used by main.php.net)
* phpmailer/phpmailer (used by main.php.net)
* squizlabs/php_codesniffer (used by news-web.php.net)
* symfony/dotenv (used by pecl.php.net)
* symfony/console (used by pecl.php.net)
* fzaninotto/faker (used by pecl.php.net)
* friendsofphp/php-cs-fixer (used by www.php.net)

The way that the "PHP documentation" section talks about third-party libraries feels strange, but there are also other third-party tools and services mentioned and that we may want to think about:

The documentation has a chapter on installing LiteSpeed which covers both the commercial version (LiteSpeed Web Server) and the open source version (OpenLiteSpeed Web Server). https://www.php.net/install.unix.litespeed

Can we add a section on Caddy that is similar to the ones for Apache and NGINX?

What about FrankenPHP?

The instructions for installing macOS via packages has an example for Brew but not for MacPorts or Fink. https://www.php.net/install.macosx.packages

There is a section in the Windows install docs that lists third-party packages but there's not even an example or explanation like there is for Brew on macOS: https://www.php.net/install.windows.tools

There is a chapter on installing PHP on cloud providers that only includes three providers: https://www.php.net/install.cloud

Could we add a section about Google Cloud?

Could we add a section about Oracle Cloud?

Could we add a section about STACKIT?

Could we add a section about Hetzner?

What about Laravel Cloud (when it launches)?

Jim