Miguel Dantas 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
..
apereo a1edc2c6a9 [CORE][COMPOSER] Move plugins extlibs to composer (where appropriate) 5 lat temu
bin 2a06261f75 [CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies 5 lat temu
clue 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
composer 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
diogocomposer a1edc2c6a9 [CORE][COMPOSER] Move plugins extlibs to composer (where appropriate) 5 lat temu
embed db3253e5d2 [CORE] Bump PHP requirement to PHP7.3+ 5 lat temu
enqueue 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
ezyang 1d41ff16d6 [COMPOSER] Added embed/embed 5 lat temu
guzzlehttp 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
hoa ec32db2dd6 [CORE][COMPOSER] Add hoa/consistency 5 lat temu
intervention 2db3825940 [CORE][COMPOSER] Added intervention/image 5 lat temu
masterminds 2a06261f75 [CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies 5 lat temu
mf2 2a06261f75 [CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies 5 lat temu
michelf a1edc2c6a9 [CORE][COMPOSER] Move plugins extlibs to composer (where appropriate) 5 lat temu
openid 2a06261f75 [CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies 5 lat temu
paragonie ec32db2dd6 [CORE][COMPOSER] Add hoa/consistency 5 lat temu
pear 7d262ad50b [CORE] Fixed some small issues with PEAR 5 lat temu
php-http 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
phpseclib ec32db2dd6 [CORE][COMPOSER] Add hoa/consistency 5 lat temu
predis 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
psr 2db3825940 [CORE][COMPOSER] Added intervention/image 5 lat temu
queue-interop 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
ralouphie 2db3825940 [CORE][COMPOSER] Added intervention/image 5 lat temu
richardfullmer 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
stomp-php a1edc2c6a9 [CORE][COMPOSER] Move plugins extlibs to composer (where appropriate) 5 lat temu
symfony 630a578e1d [COMPOSER] Added predis/predis and updated packages 5 lat temu
README.md 39845444cc [DOCUMENTATION] Update description of extlib and vendor directories 5 lat temu
autoload.php a1edc2c6a9 [CORE][COMPOSER] Move plugins extlibs to composer (where appropriate) 5 lat temu

README.md

DO NOT "FIX" CODE IN THIS DIRECTORY.

ONLY UPSTREAM VERSIONS OF SOFTWARE GO IN THIS DIRECTORY.

This directory is provided as a courtesy to our users who might be unable or unwilling to find and install libraries we depend on.

If we "fix" software in this directory, we hamstring users who do the right thing and keep a single version of upstream libraries in a system-wide library. We introduce subtle and maddening bugs where our code is "accidentally" using the "wrong" library version. We may unwittingly interfere with other software that depends on the canonical release versions of those same libraries!

Forking upstream software for trivial reasons makes us bad citizens in the Open Source community and adds unnecessary heartache for our users. Don't make us "that" project.

Frequently Asked Questions

Q: What should we do when we find a bug in upstream software?

A: First and foremost, REPORT THE BUG, and if possible send in a patch.

Watch for a release of the upstream software and integrate with it when it's released.

In the meantime, work around the bug, if at all possible. Usually, it's quite possible, if slightly harder or less efficient.

Q: What if the bug can't be worked around?

A: If the upstream developers have accepted a bug patch, it's undesirable but acceptable to apply that patch to the library in the extlib dir. Ideally, use a release version for upstream or a version control system snapshot.

Note that this is a last resort.

Q: What if upstream is unresponsive or won't accept a patch?

A: Try again.

Q: I tried again, and upstream is still unresponsive and nobody's checked on my patch. Now what?

A: If the upstream project is moribund and there's a way to adopt it, propose having the GNU social dev team adopt the project. Or, adopt it yourself.

Q: What if there's no upstream authority and it can't be adopted?

A: Then we fork it. Make a new name and a new version. Include it in extlib/ instead of vendor/, and use the GNUsocial_* prefix to change the namespace to avoid collisions.

This is a last resort; consult with the rest of the dev group before taking this radical step.