https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20340 --- Comment #55 from David Cook <dcook@prosentient.com.au> --- (In reply to Martin Renvoize from comment #49)
This is a manageable risk. I believe we should end up with a repository of signed and trusted plugins as per Alex's response (comment #48) and have a granular set of permissions on the server as to what types of plugins may be installed via the client. I've been wanting to work towards this for some time, along with adding translations to plugins and generally enhancing the system as a whole.. but these things all need sponsorship, time and money.
I love the sound of all of that, and I really relate in terms of time and money. I know I must sound like a troll by leaving lots of comments and not "doing" anything about them, but it's all I have time for at the moment.
Koha is a well established and highly reliable system these days, relied upon by countless libraries. I am a firm believer in our quality assurance policies and the both the commit logs and release notes serve to prove that the software is still moving forward rapidly with enhancements and new features continually being integrated. Yes, we could always do with more hands/eyes on the code and people supporting each other by offering SO and QA time. That is something I intend to work on if I am elected to be RM over the next two cycles, but I think it's very unfair to suggest one has to have extensive influence/power to get code into the community. I believe we are a very supportive and friendly community in 99% of cases and I would certainly support anyone's efforts to get code in.. sometimes it is hard to pick which bugs to focus on and I'm always open to suggestions via any means (email, irc, bugzilla priorities)
This is very true. I should have chosen my words more carefully. The Koha community is very supportive and very friendly. I don't think there's an open source community that is warmer and receptive than this one. I'm reminded of that every time I look at the photo of my child in a "Future Koha Developer" onesie that Katrin sent us when bub was born. It's true that you don't need extensive influence/power to get code into the community, and I use my first patch as evidence of that: http://git.koha-community.org/gitweb/?p=koha.git;a=commitdiff;h=b49af1df17c0.... I'd been using Koha for less than 2 months at that point, and I didn't really know anyone in the Koha community. I think my earlier comment about influence/power relates to particular frustrations experienced by individuals that can be discussed elsewhere. Good luck with the elections, Martin! Koha would be very safe in your hands! -- You are receiving this mail because: You are watching all bug changes.