Re: [RFC] Policy on 3rd party code

On Sat, Oct 26, 2024, at 3:24 PM, Jim Winstead wrote: > There were more existing 3rd-party dependencies that should probably be > added to the policy text: > > https://news-web.php.net/php.internals/125769 > > Two I missed were JpGraph and Parsedown which are used by web-doc. > (Currently by side-loading JpGraph and having an old copy of Parsedown > committed to web-doc, I would hope to move those out as Composer > dependencies if we decide to allow that.) > > Jim I have updated the pre-approved list to include everything we're currently using for PHP Tooling, and added a few of them to the other lists as well. (List both Psalm and PHPStan, list both CS-Fixer and CodeSniffer, etc.) For JPGraph, it looks like the original is abandoned and there's a zillion forks, so I listed the one that is by far most popular on Packagist. Since folks may have opinions on these lists, I'll give it a few more days before calling the vote in case someone wants to weigh in. The link again is: https://github.com/php/policies/pull/10 --Larry Garfield