Re: Changing PECL signup flow.
| From: | Johannes Schlüter | Date: | Wed, 18 Sep 2019 13:22:02 +0000 |
| Subject: | Re: Changing PECL signup flow. | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-107202@lists.php.net to get a copy of this message | ||
On Mon, 2019-09-16 at 11:13 +0200, Christoph M. Becker wrote:
>
> For the record, there is already
> <https://github.com/FriendsOfPHP/pickle>, but that
> project looks like
> it has fallen asleep.
>
Right and contrary to the old PECL/PEAR tool this can also fetch the
precompiled Windows binaries afaik.
The Windows builds are also a relevant factor in the discussions
regarding the PECL site. Afaik (Anatoliy and others know better than
me) packages uploaded to the pecl site are being built in the same
setup as our official PHP runtime Windows builds. Not sure how well
that image is protected against bad actors doing nasty stuff in their
build scripts. Thus some oversight about who can push code up there
might be good.
johannes