guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: About SWH, let avoid the wrong discussion


From: Luis Felipe
Subject: Re: About SWH, let avoid the wrong discussion
Date: Fri, 21 Jun 2024 16:33:40 +0000
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0


El 21/06/24 a las 14:15, MSavoritias escribió:
On Fri, 21 Jun 2024 13:45:04 +0000
Luis Felipe <sirgazil@zoho.com> wrote:

El 21/06/24 a las 10:44, MSavoritias escribió:
On Fri, 21 Jun 2024 11:46:56 +0200
Andreas Enge <andreas@enge.fr> wrote:
Am Fri, Jun 21, 2024 at 11:14:18AM +0300 schrieb MSavoritias:
Aside from that even Guix uploading all code from the packages to
SWH that basically feeds it to a LLM model is indeed not honoring consent of 
the author of the package.
Guix does not upload code to SWH. It gives them a pointer to a public git
repository that SWH then harvests or not according to their rules (see my
reply to Dale yesterday). These are not the same things at all.
This is bikeshedding and arguing on schemantics. Guix gives them a url to 
download the source code from, so ultimately we (the Guix project) is 
responsible for the code showing up in there.
Lets not argue over schemantics like this. It is even posted on their website 
in case you want to argue otherwise 
https://www.softwareheritage.org/2019/04/18/software-heritage-and-gnu-guix-join-forces-to-enable-long-term-reproducibility/
I think the differentiation between sending code and sending a URL is
necessary. Saying that Guix sends your code or your source files to SWH
leads people to think that Guix *will* transmit those files from your
local machine over the Internet to SWH machines when you run "guix lint
YOUR_PRIVATE_PACKAGE". And that's not the case, is it?
But I didnt say that tho did I? the context you are reading as from the quote 
is Guix uploading all code from its packages to SWH.
Not any private repos. So i have no idea what you are reffering to here tbh.

No, you didn't.

What I'm trying to say is that I don't think specifying what Guix sends/uploads to SWH is "bikeshedding". For example, when you say "Guix uploading all code from its packages to SWH", it's ambiguous to me. I don't understand whether you are referring to the package definitions or to the source files those packages refer to. And, if I understand correctly, Guix doesn't upload any of these to SWH.

Attachment: OpenPGP_0x0AB0D067012F08C3.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]