[ports] finding an orphan to maintain

[Damien Fleuriot]

Thanks for the additional input Roland.


I currently have my eye on shells/lshell, which we use here on
10-STABLE for PCI-DSS compliance (restricting and logging commands).

It so happens the current (0.9.16_2) version on FreeBSD suffers from a
nasty case of shell escape :
https://github.com/ghantoos/lshell/issues/151
root:~$ echo () sh && echo
#
^-- uh oh...

I cannot seem to reproduce when using the latest master branch, and am
seeking confirmation in the bug thread that I'm actually trying to
reproduce correctly.

If it should transpire that the problem is indeed fixed in the master,
I shall try and update the port to the latest version.

On 11 January 2017 at 12:06, Roland Smith <rsmith at xs4all.nl> wrote:
> On Tue, Jan 10, 2017 at 03:26:53PM +0100, Damien Fleuriot wrote:
>> Hello list,
>>
>> Is there any place that lists orphaned ports, as in ports lacking an actual
>> maintainer ?
>
> The answer in the forum post (https://forums.freebsd.org/threads/36243/) linked to
> by Anastasios Mageirias is good but not complete.
>
> The state of a port as an orhpan is not as black-and-white as it might seem.
>
> Ports that have no maintainer *and have no relevant mailing-list* have their
> maintainer listed as “ports at freebsd.org”. These are clearly orphans.
>
> But (for example) python or ruby related ports that have no dedicated maintainer
> have their maintainer listed as “python at freebsd.org” or “ruby at freebsd.org”,
> i.e. the relevant mailing-list. Look for example at the math/py-numpy port.
> This has python at freebsd.org listed as maintainer, but is still regularly
> updated via PRs.
>
>> Being a sysadmin and not a dev, I'm looking for a (very) entry level port,
>> something which doesn't require deep programming knowledge.
>
> Look for orphan ports with a relatively short port Makefile . :-) The
> aforementioned math/py-numpy is a case in point. At 103 lines it is not a port
> for beginners, I'd say. Something like for example audio/wmrecord for example
> would be better suited.
>
> But most important is probably that it is a port *you use and care about*. A
> port where you don't mind checking the website for updates and submitting a PR
> with port updates.
>
> Roland
> --
> R.F.Smith                                   http://rsmith.home.xs4all.nl/
> [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
> pgp: 5753 3324 1661 B0FE 8D93  FCED 40F6 D5DC A38A 33E0 (keyID: A38A33E0)