On Mo, Mär 28 2022 at 20:07:42 +0200, Martin Wilck mwilck@suse.com wrote:
On Mon, 2022-03-28 at 18:56 +0200, Richard Brown wrote:
On Mon, 2022-03-28 at 18:53 +0200, Stefan Seyfried wrote:
On 28.03.22 18:50, Richard Brown wrote:
I agree, but this deficiency of Leap should not be addressed by encoraging people to use untested, unreviewed, unmaintained, unsupported, unsupportable software.
I find this statement disrespectful against everyone who maintains software in inofficial repos. Almost all packages in openSUSE started out in home projects and passed through a devel project before eventually being added to the distro. At the end of the day, the quality difference between official and inofficial packages is not as huge as you imply.
Of course, when you activate someone's home repo, you don't know. The repo owner may be long gone or be a malicious jerk. So no, we shouldn't actively encourage it. But we shouldn't discourage it, either, because we'd be discouraging our distribution as such.
Perhaps some weak "review" process could be established around public, inofficial OBS repositories. For example, a bot could auto-uncheck the "publish" flag for repos that haven't seen any updates for a long time, and users setting the "publish" flag could be asked to provide meaningful descriptions for their repos and the packages therein.
From software-o-o side, we could make it so that to actually have the package show up in the search on the site, the maintainer of the package would have to agree to it, with a reminder every 3ish months, that way users wouldn't have the option to install my experiment on removing half of the source code of grub and seeing if it still works fine on TW.
At that point though, I really don't understand why people wouldn't just submit the package to Factory if they have to go through that process. This is kind of the reason why during oSC19, when discussing software-o-o, we decided it would be best to notify the maintainers their software is popular and that it would be great to have it be a part of the main repositories. Realistically for openSUSE, it would be far better if we all focused our attention on maintaining some common resource, instead of spreading the work across a lot of different places.
LCP [Sasi] https://lcp.world/