-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-10-14 06:54, Wojtek Porczyk wrote:
> On Thu, Oct 13, 2016 at 02:19:35PM -0700, Andrew David Wong wrote:
>> On 2016-10-13 13:22, Marek Marczykowski-Górecki wrote:
>>> On Thu, Oct 13, 2016 at 11:30:39AM -0700, Andrew David Wong wrote:
>>>> If we want to allow authors to retain control (on GitHub) of their
>>>> own software (and not any other contributor's software), then it seems
>>>> like the only option is to allow each author to host their own
>>>> software under their own account (or an account they control).
>>>
>>>> What if we just fork those repos (either into the official QubesOS
>>>> account or into a separate one created for this purpose), then
>>>> update the forks based on changes to the author-owned original
>>>> repos (only accepting author-signed commits and/or tags, of course,
>>>> and perhaps after a review process)? Isn't that essentially what
>>>> we're already doing with i3[1], awesome[2], and yubikey[3]?
>>>> (Awesome yubikey are forked from repos owned by woju
>>>> and you, so maybe those don't really count.)
>>>
>>> Yes, this is the other option. The question here is: where should those
>>> forks be (current github org or a new one) and how should be named
>>> (original name, or some forced naming scheme like qubes-app-*)?
>>>
> 
>> I think it's fine to choose option 4 here, in line with your preference.
>> Since it would be a dedicated GitHub organization, we could simply
>> preserve the upstream names. Or, if there are organizational benefits
>> to prefixing (e.g., to sort them into groups or categories), then
>> adopt some prefixing scheme. It probably wouldn't be beneficial to
>> prefix them all the same way (e.g., qubes-app-*). (Maybe the GitHub
>> organization itself should be called Qubes-apps or QubesOS-apps?)
> 
> Just a thought: can't we invite those original authors to this new
> organisation? They could upload the code directly, but we'd still have to tag
> the code for builder to verify. They'll have a nice logo on their GitHub
> profile as a token of recognition.
> 

Yes, good idea. Membership in the GitHub organization should be
available as an incentive for contributors. However,I don't think
uploading code directly to this organization (as opposed to the
contributor's own GitHub account) should be a requirement.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=ov9x
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/fdc5588d-b0cf-f5bd-87ae-1667cafc7cae%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to