Re: About SWH, let avoid the wrong discussion

[Luis Felipe]

El 21/06/24 a las 14:15, MSavoritias escribió:
> On Fri, 21 Jun 2024 13:45:04 +0000
> Luis Felipe <sirgazil@zoho.com> wrote:
>
> > El 21/06/24 a las 10:44, MSavoritias escribió:
> > > On Fri, 21 Jun 2024 11:46:56 +0200
> > > Andreas Enge <andreas@enge.fr> wrote:
> > >   
> > > > Am Fri, Jun 21, 2024 at 11:14:18AM +0300 schrieb MSavoritias:
> > > > > Aside from that even Guix uploading all code from the packages to
> > > > > SWH that basically feeds it to a LLM model is indeed not honoring consent of 
> > > > > the author of the package.
> > > > Guix does not upload code to SWH. It gives them a pointer to a public git
> > > > repository that SWH then harvests or not according to their rules (see my
> > > > reply to Dale yesterday). These are not the same things at all.
> > > This is bikeshedding and arguing on schemantics. Guix gives them a url to 
> > > download the source code from, so ultimately we (the Guix project) is 
> > > responsible for the code showing up in there.
> > > Lets not argue over schemantics like this. It is even posted on their website 
> > > in case you want to argue otherwise 
> > > https://www.softwareheritage.org/2019/04/18/software-heritage-and-gnu-guix-join-forces-to-enable-long-term-reproducibility/
> > I think the differentiation between sending code and sending a URL is
> > necessary. Saying that Guix sends your code or your source files to SWH
> > leads people to think that Guix *will* transmit those files from your
> > local machine over the Internet to SWH machines when you run "guix lint
> > YOUR_PRIVATE_PACKAGE". And that's not the case, is it?
> But I didnt say that tho did I? the context you are reading as from the quote 
> is Guix uploading all code from its packages to SWH.
> Not any private repos. So i have no idea what you are reffering to here tbh.

No, you didn't.

What I'm trying to say is that I don't think specifying what Guix 
sends/uploads to SWH is "bikeshedding". For example, when you say "Guix 
uploading all code from its packages to SWH", it's ambiguous to me. I 
don't understand whether you are referring to the package definitions or 
to the source files those packages refer to. And, if I understand 
correctly, Guix doesn't upload any of these to SWH.

OpenPGP_0x0AB0D067012F08C3.asc
Description: OpenPGP public key

OpenPGP_signature
Description: OpenPGP digital signature