Re: Why are so many great packages not trying to get included in GNU Emacs?

[Eli Zaretskii]

> From: Clément Pit-Claudel <address@hidden>
> Date: Mon, 11 May 2020 14:51:26 -0400
> Cc: address@hidden, address@hidden, address@hidden,
>  address@hidden, address@hidden
> 
> On 06/05/2020 22.43, Richard Stallman wrote:
> > It is not terrible lot of work for people to deal with those issues, 
> > but I wouldn't assume a simple program can.
> 
> These days assignments are signed with PGP keys.  Commits can also be signed 
> using PGP keys.  Wouldn't that provide an reliable way to pair up 
> contributors who have assigned copyright with their contributions?

I think you are missing the main point.  The problem is not security,
it is correct attribution.  The author of the committed changeset (not
the person who does the commit, the author) must be the person who
actually wrote the code, not someone else.  If that someone else is a
real benevolent person, it is still a problem, because we will make a
false presentation that a different person made the change.