SENOO, Ken 628262ab32 Revert "Update dependency with run 'composer install'" 8 months ago
..
alchemy d7ec199793 [COMPOSER] Add new php-ffmpeg package 3 years ago
apereo 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
bin 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
clue 19d68c9f8e [COMPOSER] Added predis/predis and updated packages 3 years ago
composer 628262ab32 Revert "Update dependency with run 'composer install'" 8 months ago
diogocomposer a67953b840 [XMPP] Respond to ping and track time monotonically 3 years ago
doctrine 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
embed 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
enqueue 19d68c9f8e [COMPOSER] Added predis/predis and updated packages 3 years ago
evenement d7ec199793 [COMPOSER] Add new php-ffmpeg package 3 years ago
ezyang 10f0a15614 [VersionBump] 2.0.0alpha0 3 years ago
guzzlehttp 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
hoa ec32db2dd6 [CORE][COMPOSER] Add hoa/consistency 5 years ago
intervention 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
masterminds 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
mf2 2a06261f75 [CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies 5 years ago
michelf 10f0a15614 [VersionBump] 2.0.0alpha0 3 years ago
neutron d7ec199793 [COMPOSER] Add new php-ffmpeg package 3 years ago
openid 2a06261f75 [CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies 5 years ago
paragonie 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
pear 10f0a15614 [VersionBump] 2.0.0alpha0 3 years ago
php-ffmpeg d7ec199793 [COMPOSER] Add new php-ffmpeg package 3 years ago
php-http 19d68c9f8e [COMPOSER] Added predis/predis and updated packages 3 years ago
phpseclib ec32db2dd6 [CORE][COMPOSER] Add hoa/consistency 5 years ago
predis 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
psr 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
queue-interop 19d68c9f8e [COMPOSER] Added predis/predis and updated packages 3 years ago
ralouphie 2db3825940 [CORE][COMPOSER] Added intervention/image 5 years ago
richardfullmer 19d68c9f8e [COMPOSER] Added predis/predis and updated packages 3 years ago
stomp-php 10f0a15614 [VersionBump] 2.0.0alpha0 3 years ago
symfony 6e031d623a [VersionBump] 2.0.0beta0 3 years ago
README.md 39845444cc [DOCUMENTATION] Update description of extlib and vendor directories 5 years ago
autoload.php a1edc2c6a9 [CORE][COMPOSER] Move plugins extlibs to composer (where appropriate) 5 years ago

README.md

DO NOT "FIX" CODE IN THIS DIRECTORY.

ONLY UPSTREAM VERSIONS OF SOFTWARE GO IN THIS DIRECTORY.

This directory is provided as a courtesy to our users who might be unable or unwilling to find and install libraries we depend on.

If we "fix" software in this directory, we hamstring users who do the right thing and keep a single version of upstream libraries in a system-wide library. We introduce subtle and maddening bugs where our code is "accidentally" using the "wrong" library version. We may unwittingly interfere with other software that depends on the canonical release versions of those same libraries!

Forking upstream software for trivial reasons makes us bad citizens in the Open Source community and adds unnecessary heartache for our users. Don't make us "that" project.

Frequently Asked Questions

Q: What should we do when we find a bug in upstream software?

A: First and foremost, REPORT THE BUG, and if possible send in a patch.

Watch for a release of the upstream software and integrate with it when it's released.

In the meantime, work around the bug, if at all possible. Usually, it's quite possible, if slightly harder or less efficient.

Q: What if the bug can't be worked around?

A: If the upstream developers have accepted a bug patch, it's undesirable but acceptable to apply that patch to the library in the extlib dir. Ideally, use a release version for upstream or a version control system snapshot.

Note that this is a last resort.

Q: What if upstream is unresponsive or won't accept a patch?

A: Try again.

Q: I tried again, and upstream is still unresponsive and nobody's checked on my patch. Now what?

A: If the upstream project is moribund and there's a way to adopt it, propose having the GNU social dev team adopt the project. Or, adopt it yourself.

Q: What if there's no upstream authority and it can't be adopted?

A: Then we fork it. Make a new name and a new version. Include it in extlib/ instead of vendor/, and use the GNUsocial_* prefix to change the namespace to avoid collisions.

This is a last resort; consult with the rest of the dev group before taking this radical step.