Re: CVS Account Request

> Granted, there were less, but there were some. I think that the current > way CVS works is a bit too trusting, especially for new people. I don't > see a real problem if people send in patches for a few weeks before they're > granted write access to the source. This does effectively happen today already. I have committed a number of patches on behalf of people without giving them cvs accounts when I felt it was a one-off type of thing. I have also looked at patches and tested patches and then only after that given someone a cvs account. I don't mind trying to tighten things a little bit for new people and asking them to send patches to php-dev, but if these things start going unanswered for days and we start to lose contributions we need to fix it. > With the popularity of PHP, there comes some responsibility. I didn't find > it too much fun at all to have to represent the dev team on bugtraq. The > bugtraq security bugs were in the core, in some of the concepts of the > language. I don't want to increase the number of appearances on bugtraq > beyond the bare minimum. And again, these things were the result of things done by longtime PHP contributors and can in no way be blamed on newcomers to the PHP project. Most of the blame was in fact on my head for those. -Rasmus