This page is for coordinating and discussing development efforts, currently going on on Expo. While you can add your own ideas here, please note this page is not a wish list.
Please use this page to let other people know, what existing ideas are, and who intends to implement them. If you are looking for work, have a look to our bug list and drop a note if you are working on something - or add yourself here below.
Shiny new features
Open tasks
- Implement the Sponsor Metrics
Owner: <you?>
- Bug: None
More: DebianMentorsNet#Metrics
- Status: Open
- Integrate with Debian Teams
Owner: <you?>
Bug: Alioth
- Status: Open
- Social website idea: add review marking and user ranking to expo and/or ACK
Owner: <you?>
Bug: Alioth
- Status: Open (see RFS comments below)
Tasks being assigned to someone
- Import RFS mailing list comments to Expo
- Owner: daemonkeeper
- Bug: None
- Status: Some efforts have been made
Done stuff
- Use the GPG class to determine uploader (for FTP uploads at least)
- Owner: daemonkeeper
- Bug: None
- Status: Done, went live in v2
- Refactor the plugin infrastructure to increase readability and normalization of outputs
- Owner: olasd
- Bug: None
- Status: Done, went live in v2
Bug fixes and improvements
Open tasks
- Verify the ownership of the uploaded GPG key
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: We currently don't check if the GPG key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.
Where to look: debexpo/controllers/my.py
- Verify the strength of the GPG keys
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.
Where to look: debexpo/controllers/my.py
- Use GPG to verify the uploader of the package
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the GPG uid instead.
Where to look: bin/debexpo_importer.py Make users accept the DMUP before allowing uploads
Owner: <you ?>
- Bug: None
- Status: TODO
- Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages.
Where to look: debexpo/model/users.py (database), debexpo/controllers/my.py (user interface), bin/debexpo_importer.py (pre-import check)
Tasks being assigned to someone
- Lost password feature does not work for accounts not activated yet
- Assigned to: Asheesh
Bug: Alioth
- Status: ?
- Add proper archive meta data for repositories (e.g. Sources.gz files)
- Assigned to: Asheesh
- Bug: none
- Status: ?
- Reject certain packages which don't meet the bare essential minimal criterias
- Assigned to: daemonkeeper
- Bug: none
- Status: Staging
Done
- Rework the viewer class to come over HTML display issues
- Assigned to: olasd
- Status: Done, went live in v2
- Remove packages from Expo which have been uploaded to Unstable
- Assigned to: daemonkeeper
- Bug: none
- Status: Done, went live in v2
- Adding comments leads to an "Internal Server Error"
- Assigned to: olasd
Bug: Alioth
- Status: Done, went live in v2.2