On 18.09.2019 at 15:22, Johannes Schlüter wrote: > The Windows builds are also a relevant factor in the discussions > regarding the PECL site. Afaik (Anatoliy and others know better than > me) packages uploaded to the pecl site are being built in the same > setup as our official PHP runtime Windows builds.
The PECL builds are done on another VM than the Windows builds. > Not sure how well > that image is protected against bad actors doing nasty stuff in their > build scripts. Thus some oversight about who can push code up there > might be good. Indeed, something to consider. The build code is publicly available, btw.: <http://git.php.net/?p=web/rmtools.git;a=summary>. -- Christoph M. Becker -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
