From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 24459 invoked from network); 8 Feb 2023 09:38:10 -0000 Received: from hurricane.the-brannons.com (HELO blvuug.org) (2602:ff06:725:1:20::25) by inbox.vuxu.org with ESMTPUTF8; 8 Feb 2023 09:38:10 -0000 Received: from hurricane (localhost.localdomain [127.0.0.1]) by blvuug.org (OpenSMTPD) with ESMTP id 77a62e3f for ; Wed, 8 Feb 2023 09:38:06 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) by hurricane.the-brannons.com (OpenSMTPD) with ESMTPS id dc452600 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) for ; Wed, 8 Feb 2023 09:38:00 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.de; s=s31663417; t=1675849073; bh=gNvSWSxvwP7gLjDPMT7GQPOwnFBpDzYCPZQdC/D1vUE=; h=X-UI-Sender-Class:Date:From:To:Subject; b=j9QHLXqwfCBjynUROO4f2apTrkAWuNGFtEqUjBXGWH2b6Kc9x2Fn680Y/SFwrmtRF 8pUc53wltPmCrNg5p38mbOYY+E+fiR/+0Wr58g44SYWkYQf1XR0Q8IeYSxx3ESgqcA PuvI6iENQ8T3vm77vphuG0LNX5xuwBXqnPWaLmsK7ggVtGchexyYSHl6BKOhehmuU9 pa4NtO0lOVk+4LKhHJ6eBH6nNYBnC4DSsLmIdy7w4/Zth8tJnA00Op6FlD2GxCiDpy YUaogmog2nlrwUnV7dmiDa/7MOMYz3vjZhDmS+smqonT+C0r78sForkaNcbRbBhClJ jM0r2z12I1cKA== X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a Received: from kraftkrust ([2.211.118.177]) by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1N95iR-1oUor924Wt-0165cv for ; Wed, 08 Feb 2023 10:32:48 +0100 Date: Wed, 8 Feb 2023 10:32:46 +0100 From: Sebastian Humenda To: edbrowse-dev@edbrowse.org Subject: QuickJS and maintenance Message-ID: X-BeenThere: edbrowse-dev@edbrowse.org List-Id: Edbrowse Development List MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ODiNvhG2AETpA6G8" Content-Disposition: inline X-Provags-ID: V03:K1:VEo1Ea6djgwTVA/8HI8B4HckWmWmK3ahhZHSmWWaxuLRsZTQi+D gdQqd4EqQMGowzSb/O3y8O6/Zg4Mx4KL1YtgdoEN5y5wWTSPlHwTPOxvpjLGre7Hdf2a7FY cELv6Fr2tNznvzXVV7j5gbQT22EmQLo+6wez1/c0tXXA9Uzk/MKpkvIq4i0EB0GD+pve3V4 +DyOZPsd8abzvl2Uzw78w== UI-OutboundReport: notjunk:1;M01:P0:WmdSC4jrPj0=;wMZqnLnn8i8qHUbEy7tLNBLh4oy uy1FEv2d74MetglbhiOMELeBZf+pyDSUrX3pWHTkWPTIOQdAUdoILEk/AE4AekS7+Uzgknwfp jJ0nkg0rusvstL78URgRpwV2v37dw6WJX9Nhrrnbpn+OZPLzbRydwIJt+C+dT1PGme6SCfFWJ 4OLr+yXA5+2gqHpmZAGPpDzNFd/Uq9Dun267ZboZgItqWyHHUsX4/wUviiqJN9dfuhEEAm5pb QlDMEKPOeCprsqLK/PT36QvSRIKflWP5yNddSGPwntE6PMvvZag9VudWCOErtCDMvpSIolETD HtOMIL57lyvSIud7N9KD7VaWk03dTeC8Qp0BHFVOYrcfS2xnRz9c5tBmGSfIBNetGeQp4jFH0 GLSL1jmSo05jAWaSzQ6N8KxGKXfJVl8q32O7u+PLEfuR5tEImBaPmwoiMhG+D7DK77kSxWbUl bIKIGeNHEYwDJF0cy1yYdKsWElMlZPMaugcP+UqKVD3gp7k/q/ozwcVM041OVmcCsiHY2FLyR rbntud42DqLEv6VTJxJKOHVgYySbWTwO2AkfBm9J3S4LofF4w78FIyQud8dfyOd2Zh4Y7lm3o EUKOe/cz8ot1M1mM43cLVKRUascW3Fbs+FuT5RDiUNdndQPjuPZonehujgjHcm3IKYcmQxoUL 7+IcN0hbmZZidqjYqFj9BVo+vATyEA05PncbUyzEJPQWzIKCgZ2ymAVeNQ6/rekPvXv4JeGAd pXkXdqzn7GtIZeJM1zt4UBN4cCodMme1U925FnDEvzuKuiTNPMqZNKo42jNoorQC1UfuJwogh XFyYYqHGqO2vox4sHHfCNV9qV5f5ti108+tKGvNRt672+WoBfwYtlRkwlpFXOeu6CINB5D2TQ 7RMDrW2qpAvYikZdSJ5k78JvR+SDIFpBOl1TrcngdapdCobDV1/koi813kz7Dhid03c7qNLUq nu9zki6CRU2eYG7P5x3bpa+cHW8= --ODiNvhG2AETpA6G8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi all I have prepared a packaged version of QuickJS for Debian that is a dependency of Edbrowse. However, during that process the question got raised whether such a security-sensitive package would be appropriate to package in Debian. The main point is that this puts additional burden on the Debian security team and it seems that QuickJS is not the most actively maintained project. Hard specific are the bindings of Edbrowse to QuickJS and is it feasible to switch to something else? To me, Duktape comes to mind. It looks slightly more maintained and is already in Debian. Thanks Sebastian --ODiNvhG2AETpA6G8 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEDdK8MMbHMms/+s0k2/EkeQsw7KUFAmPjbDoACgkQ2/EkeQsw 7KUgYhAA1jQN3Wa9XKrQiiM2cpeVBj8vpbziNV87QAmSNrcerSH7mztoXT4H0dRf ZHATV7hFBFJuoj/Xp7XykKpLRN6AfFw4BDhpBQK1UUezXPEr/oUvRQWn1LIFtpDm ECZGyR8J/LpNZcQXmPfWo8nh9mx+4sdiHApJ3iCeeideRpPUrrqZ2rT3v0vWepfG 7HlZBBfQe2UgB1Ob+56szlf1K0AeHY5WAWEMoARq82x1nr/RGj4JgLS2mNA4Ji9N +JsRytG6Q5BbTK/ZeBEqsIq410PpouIUxuX2XJj0yEp8/boaIMTXfo13WeCUq1Jx RJ2feo2JXAJxwIDi7L9DSzi7UD72Besc/xKwFXukRqmTZuoeHCi2r2RltXECfF6C mt63DS0lUbuogRi9JnHzpA9ickynxMdzXFjpVYJlUklxHY1EWTp52ca1qtJw+lgb X0+L8lc+d0c/a/XGoaawAYK+VKoqn4wUnvkXGMewdqUrfbapJxOzeRcyrIcOCA+G ergWg7e7QOaEIPiOXet9DvFEXzVAqlVwd6TQ13Hz3K91PoG7VUpGJ5Rt15I78cOL 9Ce6BA3yx7l8QkdQ4Dqw0N805FPL8snlsAR+k0+94akXsrHKSXVE913nuCBgQX1i dLIFdrCZzBc2dFWjxIbFyBAottUvq7Mg9hR12Pizw0lAhf6PeVo= =BgaY -----END PGP SIGNATURE----- --ODiNvhG2AETpA6G8--