https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23975
David Cook <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #35 from David Cook <[email protected]> --- (In reply to Jonathan Druart from comment #31) > I am sorry but I have concerns about this patch. Feel free to ignore them. > > To me this feature is not ready as it. > With those patches, the default will be to search on theke and bws github > repo. Nothing says that the plugins are fetched from "outside". > Did anyone review those plugins? > Why only those 2 companies? What about others (ptfs-e, biblibre, inlibro, > etc)? > What if a plugin that have security issues is pushed to those repos? > I have those same concerns. At the very least, there should be transparency about where the plugins are being fetched from. > When are you going to work on follow-up bugs? Is the plan to have them ready > for 20.05? I've done the plugin signing work on https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632, but I only did it for manually uploaded plugins. I only noticed this bug's functionality as I was wrapping up my initial work. I'll have to revisit it... -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
