You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@community.apache.org by Christopher <ct...@apache.org> on 2018/05/01 20:22:30 UTC

Two problems (and suggested fixes) in projects.apache.org

The first issue is not really with p.a.o, but with Whimsy:

In https://whimsy.apache.org/public/committee-info.json, the webpages are
listed as http:// instead of https:// (or unqualified), which causes them
to be imported into projects.apache.org with the insecure link.... with no
way for the PMC to override this to ensure their site uses https:// there.

I can manually update projects.apache.org by modifying files in
https://svn.apache.org/repos/asf/comdev/projects.apache.org/trunk/site/json/foundation/
(especially
committees.json), but I'm pretty sure a cron job will undo the changes.

Suggested fix: use the value of the committee's RDF in
data/committees/<pmc>.rdf file's <foaf:homepage/> field's "rdf:resource"
attribute instead.
Alternatively, just use https:// everywhere by default.


The second issue is that repositories.json is out of date:

There does not appear to be any cron scripts or README explaining how this
file is updated. It doesn't appear to be updated at all, since repositories
which don't exist in https://git.apache.org are still listed here
(incubator repos which have graduated are notable ones). Also, nothing from
https://gitbox.apache.org/repos/asf is listed in this file, even though
they should be.

Suggested fix: have a cron job regularly scrape both https://git.apache.org and
https://gitbox.apache.org/repos/asf to update repositories.json


Thanks,

Christopher