Hi David, On Wednesday, 13 January 2021 3:05:37 AM AEDT David Prévot wrote: > civicrm-common depends on composer, it seems like it is used as a > dynamic autoloader: > > https://salsa.debian.org/debian/civicrm/-/blob/master/debian/autoload-vendo > r.php.tpl#L11 > > Please, do drop the dependency on composer
Thank you for your suggestion. Unfortunately, at the moment I can not do that as CiviCRM just does not work without it (or I don't know _how_ to do it). > and use proper static autoloader(s) instead. What would that be? I've thought that using phpab is the way to go. My knowledge is limited. How do you recommend to address the problem? > There is work in progress to make that task > mostly automatic in the future, but relying on composer to make every > PHP library installed on the system available to civicrm seems like a > very bad idea (maybe even a security issue). I do not see that as a problem. For example, it is normal for Perl applications to have access to all installed libraries. For CiviCRM it make sense to use few vendored libraries and have "/usr/share/php" as a last location in the include_path to expose operating system libraries to be used as required. Moreover, CiviCRM is a complex modular application. Some components can be enabled/disabled by admin and that affects the list of used libraries. I'm not sure how it affects use of composer... > https://salsa.debian.org/php-team/pear/pkg-php-tools/-/merge_requests/6 Interesting approach. Thank you. I'm looking forward to try it once it is incorporated into "pkg-php-tools" with detailed HOWTO instructions and examples for beginners. IMHO using composer is awkward and causes a lot of packaging inconvenience. I would love to learn more about better ways to package apps depending on composer. Thanks. -- All the best, Dmitry Smirnov GPG key : 4096R/52B6BBD953968D1B --- "Government using COVID-19 to get rid of jury trials" -- Kate Brunner QC, head barrister for Cornwall and Devon https://www.cornwalllive.com/news/government-using-covid-19-rid-4260447
signature.asc
Description: This is a digitally signed message part.
