Hello Debian Developers, Debian provides more than 51000 packages. From those packages, some are appropriate for every ages, and some others are only for specific age groups for some reasons.
In order to inform to users, especially parents, about potentially objectionable content in Debian packages, Content Rating System (CRS) can be deployed to Debian. With CRS, users can choose to install packages that is rated for their age. In some cases, CRS also filter or block certain contents in certain jurisdictions when legally required. As in Google Play, Debian CRS is based on official ratings from International Age Rating Coalition (IARC). Pros: - Users, especially parents, can install packages suitable for their age. In case of parents, this apply to their sons/daughters. - For users in some jurisdiction, they can only install packages that is legal in their jurisdiction. For example, Debian users in USA can only install US version of GnuPG, but in outside USA, users can install international version of GnuPG instead. Cons: - Since there are more than 51000 packages currently in Debian, rating review for those existing packages and new packages can take long time, depending on complexity of packages that are reviewed. - Current Debian system need to be overhauled (for example, when creating users with adduser, sysadmins need to input date of birth of their users) in order to make CRS work in Debian. - Not all programs/packages is suitable for rating review, especially command-line programs. If CRS will be implemented in Debian, I proposed following packaging workflow, based on Google Play: - Maintainers that is about to package a program, will notify to the upstream whether he/she would take a rating questionnaire or not. If he/she didn't take the questionnaire, the resulting package will be categorized as Unrated. - The upstream fill rating questionnaire and send it to IARC. - IARC calculates rating for upstream's program and send rating certificate back to upstream. If upstream don't agree with rating assigned to the program, he/she can file appeal using link in the certificate email. - Upstream contact maintainer about rating of the program that he/she get. - Maintainer then do packaging as usual and add rating for the package, possibly to control file. Based on above, what are your opinions/thoughts/positions about Content Rating System in Debian? Regards, Bagas
