<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
The best thing to do : BACKUP your data before any non trusted action.
This way, no worries to have !<br>
<br>
Martin says we have no ressources for checking each plugin.. Why not
organize a "week of test" for each new python plugin before "allowing"
it to be avaible for download in the repository. I think we are enough
people in this mailing list to quickly check each plugin ?<br>
Am I dreaming or does it sound realistic ?<br>
<br>
Martin Dobias a écrit :
<blockquote
cite="mid:e8e7199c0803060340g2097cf50kaec1f7cff90b95d@mail.gmail.com"
type="cite">
<pre wrap="">On Wed, Mar 5, 2008 at 9:30 PM, David A. Riggs <a class="moz-txt-link-rfc2396E" href="mailto:david.a.riggs@gmail.com"><david.a.riggs@gmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Thu, Feb 28, 2008 at 7:41 AM, Martin Dobias <a class="moz-txt-link-rfc2396E" href="mailto:wonder.sk@gmail.com"><wonder.sk@gmail.com></a> wrote:
>
> Here's the plugin repository located:
> <a class="moz-txt-link-freetext" href="http://pyqgis.spatialserver.net/">http://pyqgis.spatialserver.net/</a>
>
> You can register and upload the plugin there. There are also packaging
> guidelines how to create the package for your plugin.
>
Do these plugins go through any sort of inspection or quality control
before being "accepted" to the plugin repository?
Can I be sure that installing FooPlugin from the official plugin
repository won't eat all my data, kick my cat, and then leave the
toilet seat up (or at least not blow up at runtime)?
</pre>
</blockquote>
<pre wrap=""><!---->
Yes, those python plugins can do everything you've written above and
even more scary things. We don't have resources to check the plugins
(and check their updated versions etc.) You either trust the author
and install the plugin or you don't...
</pre>
<blockquote type="cite">
<pre wrap=""> Does it make sense to either display a "caveat emptor" message, or to
make the official repository contain only tested and polished plugins?
</pre>
</blockquote>
<pre wrap=""><!---->
It makes sense to put there a caution when installing new plugins that
the plugins can make you harm. Feel free to add a ticket for this
enhancement in Trac.
Regards
Martin
_______________________________________________
Qgis-developer mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Qgis-developer@lists.osgeo.org">Qgis-developer@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="http://lists.osgeo.org/mailman/listinfo/qgis-developer">http://lists.osgeo.org/mailman/listinfo/qgis-developer</a>
</pre>
</blockquote>
</body>
</html>