This page is for coordinating and discussing development efforts, currently going on on Expo. While you can add your own ideas here, please note this page is not a wish list.

Please use this page to let other people know, what existing ideas are, and who intends to implement them. If you are looking for work, have a look to our bug list and drop a note if you are working on something - or add yourself here below.

Shiny new features

Open tasks

Implement the Sponsor Metrics

Owner: <you?>

Bug: None

More: DebianMentorsNet#Metrics

Status: Open
Integrate with Debian Teams

Owner: <you?>

Bug: Alioth

Status: Open
Social website idea: add review marking and user ranking to expo and/or ACK

Owner: <you?>

Bug: Alioth

Status: Open (see RFS comments below)

Tasks being assigned to someone

Import RFS mailing list comments to Expo
Owner: daemonkeeper
Bug: None
Status: Some efforts have been made

Done stuff

Use the GPG class to determine uploader (for FTP uploads at least)
Owner: daemonkeeper
Bug: None
Status: Done, went live in v2
Refactor the plugin infrastructure to increase readability and normalization of outputs
Owner: olasd
Bug: None
Status: Done, went live in v2

Bug fixes and improvements

Open tasks

Verify the ownership of the uploaded GPG key

Owner: <you ?>

Bug: None
Status: TODO
Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.

Where to look: debexpo/controllers/my.py

Verify the strength of the GPG keys

Owner: <you ?>

Bug: None
Status: TODO
Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.

Where to look: debexpo/controllers/my.py

Use GPG to verify the uploader of the package

Owner: <you ?>

Bug: None
Status: TODO
Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead.

Where to look: bin/debexpo_importer.py

Tasks being assigned to someone

Lost password feature does not work for accounts not activated yet
Assigned to: Asheesh

Bug: Alioth

Status: ?
Add proper archive meta data for repositories (e.g. Sources.gz files)
Assigned to: Asheesh
Bug: none
Status: ?
Reject certain packages which don't meet the bare essential minimal criterias
Assigned to: daemonkeeper
Bug: none
Status: Staging

Done

Rework the viewer class to come over HTML display issues
Assigned to: olasd

Bug: 1, 2, 3

Status: Done, went live in v2
Remove packages from Expo which have been uploaded to Unstable
Assigned to: daemonkeeper
Bug: none
Status: Done, went live in v2
Adding comments leads to an "Internal Server Error"
Assigned to: olasd

Bug: Alioth

Status: Done, went live in v2.2