On Tue, 26 Sep 2017 07:50:11 +0000 (UTC), you wrote:

>On 2017-09-26, Richard W.M. Jones <rjo...@redhat.com> wrote:
>> On Tue, Sep 26, 2017 at 07:18:12AM +0000, Petr Pisar wrote:
>>> A packager is responsible for reviewing the code before uploading it to the
>>> Fedora infrastructure. It does not mattter whether the code matches what
>>> upstream released. Actually in some cases the code is intentionally
>>> changed by the packagers (e.g. when removing bad-licensed code).
>>
>> Are there any tools you'd like to suggest for reviewing 100GB
>> (or even 10MB) of code?
>>
>diff. First you review 100GB code, and then you review differences only.
>Actually you do not need to review 100GB of code. You can unbudle it
>first. I doubt the 100GB were written from scratch. 

That may be fine for any packagers who are actually paid to package
(though even then I would have my doubts that every line of source has
been checked), but it is clearly an impossible task in terms of time
required for all the volunteer packagers.
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Reply via email to