Re: Changing PECL signup flow.
| From: | Christoph M. Becker | Date: | Wed, 18 Sep 2019 13:32:38 +0000 |
| Subject: | Re: Changing PECL signup flow. | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-107203@lists.php.net to get a copy of this message | ||
On 18.09.2019 at 15:22, Johannes Schlüter wrote:
> The Windows builds are also a relevant factor in the discussions
> regarding the PECL site. Afaik (Anatoliy and others know better than
> me) packages uploaded to the pecl site are being built in the same
> setup as our official PHP runtime Windows builds.
The PECL builds are done on another VM than the Windows builds.
> Not sure how well
> that image is protected against bad actors doing nasty stuff in their
> build scripts. Thus some oversight about who can push code up there
> might be good.
Indeed, something to consider. The build code is publicly available,
btw.: <http://git.php.net/?p=web/rmtools.git;a=summary>.
--
Christoph M. Becker