Just because a package builds, loads, and passes some tests doesn't mean that it also includes some security attack. Does anyone care about / have any useful thoughts about /. that?
Sage includes Maxima and Lisp, which generally provides access to system routines, for example. RJF On Wednesday, September 13, 2017 at 6:28:10 AM UTC-7, Maarten Derickx wrote: > > Hi Dear fellow sage-developers, > > The question in the subject is related to the discussion in the Patchbot > failures metaticket > <https://groups.google.com/d/msg/sage-devel/zuMBYUhdKjA/5hQZ8396DgAJ> > thread. > > I remember that I read (somewhere a long time ago so my memory might be > off) that optional packages where expected to always build and not cause > any doctest failures and pas their own testsuite, because optional packages > were considered to have the same amount of support as sage itself, the main > reason that they are not installed by default is just because not everybody > needs them and installing by default makes the sage install even bigger > then it already is. However I seem to not be able to find this statement > anymore in either one of the places [1][2] where I would expect it. The > fact this level of support does not hold for experimental packages is made > very clear at [3]. > > So the main questions: do we consider an optional package not building, > not passing it's own testsuite or causing sage to have doctest failures a > bug? > In the other thread it was mentioned that patchbot failures should be > considered blocker status defects (at least if the failures is not due to a > buggy patchbot/patchbot on an unsupported platform). Does this also hold > for optional packages? > > [1] http://files.sagemath.org/spkg/optional/ > [2] https://wiki.sagemath.org/spkg > [3] http://files.sagemath.org/spkg/experimental/ > > > -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To post to this group, send email to sage-devel@googlegroups.com. Visit this group at https://groups.google.com/group/sage-devel. For more options, visit https://groups.google.com/d/optout.
