www/joomla3 port installs from GitHub, why?

Per olof Ljungmark peo at nethead.se
Tue May 22 10:30:51 UTC 2018


Quoting Larry Rosenman <ler at lerctr.org>:

> Because that is the way I inherited it.
>
> I may look into changing it, but if you generate a patch, I'll look at it.

I have checked over at joomla.org and my view is supported, read
https://forum.joomla.org/viewtopic.php?f=706&t=962183

"I had a read of the freebsd messages and you are correct it is  
completely wrong to use that archive in this use case. You are correct  
that the correct package is the release one"

I suspect that the way the port is set up now can lead to serious  
security issues for unknowing users. After looking around at Github I  
think it should not be too difficult to fetch
https://github.com/joomla/joomla-cms/releases/download/3.8.7/Joomla_3.8.7-Stable-Full_Package.zip
instead of
https://github.com/joomla/joomla-cms/archive/3.8.7.zip

For the "devel" discussion that followed in this thread I leave that  
to the folks who know better but it is now quite clear that the port  
is not suited for its intended purpose in its current state.

Thanks,

//per



More information about the freebsd-ports mailing list