Hi, On Wed, Jan 11, 2017 at 6:22 PM, Scott Arciszewski <sc...@paragonie.com> wrote:
> Hi all, > > I'm resurrecting my RFC to add libsodium as a core extension to PHP 7.2. > > I'm still not sure why it needs to be in the core. As I said before, there are lots of healthy extension that are not in the core and it certainly doesn't make them less used (e.g. redis, xdebug or mongo driver). At the end it's all about packaging... I think libsodium has lots of really good features and it's a very nice lib. However what makes me a bit uneasy about libsodium is that it's basically a one dev library which is even clearly visible in here: https://github.com/jedisct1/libsodium/graphs/contributors It is certainly a bit more risky to support such lib if it all depends on on one person rather than a team of developers. I'm not saying that it's the same but mcrypt used to be also just one developer lib... Cheers Jakub
