[TxMt] Re: Bundle Management improvements?

[Josh Lubaway]

Hi,

I am also interested in Bundle development from time to time.

 > The features that stand out to me immediately are:
 > Github hosting

I think almost all of the bundles are hosted on GitHub at:
https://github.com/textmate/

 > In-app searching and installing

If you open up preferences and then click on "Bundles", you can search 
for and install bundles in the app!

 > Many package managers do not really have strong vetting or security
 > policies. Homebrew is one of those.

Thanks for pointing this out! I agree that in 2017 we should be taking 
security seriously. I'd love to learn though, what are some good ways to 
set up vetting and security policies?

When I created a Homebrew (Cask?) I actually added `sha256 :no_check` to 
the definition because the Elixir bundle does not have any "releases" or 
"tags" yet :( https://github.com/claui/homebrew-textmate/pull/1/files I 
opened an issue asking them to create a stable release. 
https://github.com/elixir-lang/elixir-tmbundle/issues/132

Can we disable the `sha256 :no_check` option, and force all packages to 
reference a signed release?

Josh

On 7/7/17 7:19 PM, じょいすじょん wrote:
> I am actually trying to avoid using homebrew.
> There are lots of great things in homebrew but a few flaws are
> definitely the assumptions about the path and also the total lack of
> vetting.
> Homebrew wants to own /usr/local as if nothing else is there.
> Mac Ports on the other hand is a bit more careful to use an uncommon
> path in /opt and that is pretty valuable to me.
>
> Many package managers do not really have strong vetting or security
> policies. Homebrew is one of those.
> Mac Ports is also not great at that.
>
> It would be great if there were more guarantees than just whatever is on
> github and visible to homebrew.
>
> A directory of sorts to work with would be great but I feel like this is
> clearly a modern and missing feature, I am just not sure unmanaged
> homebrew github repos is the thing.
> I would like to hear more before people just jump on the convenience.
>
>
>> On Jul 7, 2017, at 12:02, Lewis Overton <akakie at gmail.com
>> <mailto:akakie at gmail.com>> wrote:
>>
>> I use Textmate and Brew. Linking them sounds good.
>>
>> On Tue, Jul 4, 2017 at 11:03 AM, Ryan Fitzer <ryanfitzer at gmail.com
>> <mailto:ryanfitzer at gmail.com>> wrote:
>>
>>     > To install a tmbundle, you’d run:
>>     >
>>     > $ brew tm install arduino
>>     > If more than three people find this useful, I’ll be happy to piece together a small PoC.
>>
>>     This would extremely useful. I use Homebrew for so much already.
>>     Having it for bundles would a huge benefit.
>>
>>     Ryan
>>
>>     On Jul 4, 2017, at 1:51 AM, Claudia Pellegrino
>>     <tm_emailaddress at cpellegrino.de
>>     <mailto:tm_emailaddress at cpellegrino.de>> wrote:
>>
>>     Hi,
>>
>>     The features that stand out to me immediately are: […] CLI
>>     searching and installing.
>>     Caskroom member here. With our recent integration into Homebrew
>>     last year, I think Homebrew now brings to the table a big part of
>>     what would be needed to manage TM bundles via CLI today.
>>
>>     In fact, anyone is free to create an (unofficial) Homebrew tap for
>>     TextMate bundles. A tap is just a GitHub repo, e. g.
>>     github.com/textmate/homebrew-bundles
>>     <http://github.com/textmate/homebrew-bundles>. It would contain a
>>     number of package files, which essentially point to the individual
>>     download URLs of the tmbundles.
>>
>>     This is what the user would do once to tap into the repo:
>>
>>     $ brew tap textmate/bundles
>>     To search for plugins, you’d run:
>>
>>     $ brew tm search arduino
>>     ==> Exact Match
>>     tm-arduino
>>     To install a tmbundle, you’d run:
>>
>>     $ brew tm install arduino
>>     If more than three people find this useful, I’ll be happy to piece
>>     together a small PoC.
>>
>>     Regards,
>>     Claudia
>>
>>     _______________________________________________
>>     textmate mailing list
>>     textmate at lists.macromates.com <mailto:textmate at lists.macromates.com>
>>     http://lists.macromates.com/listinfo/textmate
>>     <http://lists.macromates.com/listinfo/textmate>
>>
>>     _______________________________________________
>>     textmate mailing list
>>     textmate at lists.macromates.com <mailto:textmate at lists.macromates.com>
>>     http://lists.macromates.com/listinfo/textmate
>>     <http://lists.macromates.com/listinfo/textmate>
>>
>>
>>
>> _______________________________________________
>> textmate mailing list
>> textmate at lists.macromates.com <mailto:textmate at lists.macromates.com>
>> http://lists.macromates.com/listinfo/textmate
>
>
>
>
> _______________________________________________
> textmate mailing list
> textmate at lists.macromates.com
> http://lists.macromates.com/listinfo/textmate
>