"Tomek, I don't think we're going to find common ground here, and I'm not interested in continuing to debate these questions. Please don't reply to my emails further."
Well this seems like a bit of an impasse. A few PMCs have said they would prefer the external repository approach, and there's been consistent back and forth with neither them nor you changing their mind. If you're not interested in debating that, I'm not sure what the point of a remaining discussion here is. It should probably just move to a vote since it doesn't seem any new viewpoints have been achieved. Matteo On Thu, Oct 29, 2026, 9:18 a.m. chao an <[email protected]> wrote: > Tomek, > > I can't help but reply one more time. If any contributor in this community > is no longer able to continue, someone else — often more capable — will > step in. That's how open source works. From Greg to Alan to Xiaoxiang, the > project has always moved forward. Who comes next, I don't know. But as a > senior member of this community, I find this line of questioning > disappointing, and I regret the tone of this exchange. > > > BRs, > > Tomek CEDRO <[email protected]> 于2026年10月29日周四 20:57写道： > > > On Thu, Oct 29, 2026 at 1:43 PM chengkai <[email protected]> > wrote: > > > @anchao: > > > Hi, Tomek, > > > Let me put it this way: I'm not going to make promises or speeches > about > > > security. Let's let actions do the talking. If PR #20686 > > > https://github.com/apache/nuttx/pull/20686 gets merged, I will take > > > ownership of all CVE issues related to this code going forward. Would > > that > > > work for you? > > > > This sounds fine at first but someone with more experience will see a > > strong dependency here - what happens when you are not available? Who > > will take this job of updating the code, functionalities, and security > > issues? This organization is a bigger problem over the code itself. > > Thus everyone proposes to keep the zlib external and just maintain the > > glue. Can you please see if this is possible? > > > > Yeah lets get back to GitHub and talk on dev@ within its own thread. > > > > -- > > CeDeROM, SQ7MHZ, http://www.tomek.cedro.info > > >
