This page is for coordinating and discussing development efforts, currently going on on Expo. While you can add your own ideas here, please note this page is not a wish list.

Please use this page to let other people know, what existing ideas are, and who intends to implement them. If you are looking for work, have a look to our bug list and drop a note if you are working on something - or add yourself here below.

Shiny new features

Open tasks

Implement the Sponsor Metrics

Owner: <you?>

Bug: None

More: DebianMentorsNet#Metrics

Status: Open
Integrate with Debian Teams

Owner: <you?>

Bug: Alioth

Status: Open
Social website idea: add review marking and user ranking to expo and/or ACK

Owner: <you?>

Bug: Alioth

Status: Open (see RFS comments below)
Integrate the sponsorship-requests pseudo-package handling

Owner: <you?>

Bug: None
Status: paultag made some bits. Bug him to get his work into Debexpo
Remove accounts from e-mails we send out but bounce back

Owner: <you?>

Bug: None
Status: open

Done stuff

Use the GPG class to determine uploader (for FTP uploads at least)
Owner: daemonkeeper
Bug: None
Status: Done, went live in v2
Refactor the plugin infrastructure to increase readability and normalization of outputs
Owner: olasd
Bug: None
Status: Done, went live in v2

Bug fixes and improvements

Open tasks

Verify the ownership of the uploaded GPG key

Owner: <you ?>

Bug: None
Status: TODO
Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.

Where to look: debexpo/controllers/my.py

Verify the strength of the GPG keys

Owner: <you ?>

Bug: None
Status: TODO
Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.

Where to look: debexpo/controllers/my.py

Use GPG to verify the uploader of the package

Owner: <you ?>

Bug: None
Status: TODO
Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead.

Where to look: bin/debexpo_importer.py

Make users accept the DMUP before allowing uploads

Owner: <you ?>

Bug: None
Status: TODO
Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages.

Where to look: debexpo/model/users.py (database), debexpo/controllers/my.py (user interface), bin/debexpo_importer.py (pre-import check)

Tasks being assigned to someone

Lost password feature does not work for accounts not activated yet
Assigned to: Asheesh

Bug: Alioth

Status: ?
Add proper archive meta data for repositories (e.g. Sources.gz files)
Assigned to: open, olasd wanted to work on that
Bug: none
Status: ?
Add a nicer HTML web design

Assigned <you?>

Bug: none
Status: TODO

Done

Reject certain packages which don't meet the bare essential minimal criterias
Assigned to: daemonkeeper
Bug: none
Status: Went live in v1
Rework the viewer class to come over HTML display issues
Assigned to: olasd

Bug: 1, 2, 3

Status: Done, went live in v2
Remove packages from Expo which have been uploaded to Unstable
Assigned to: daemonkeeper
Bug: none
Status: Done, went live in v2
Adding comments leads to an "Internal Server Error"
Assigned to: olasd

Bug: Alioth

Status: Done, went live in v2.2