Re: GNU ELPA security and Org-mode

[Bastien]

Stefan Monnier <address@hidden> writes:

>>> If so, why adding org-loaddefs.el since org-autoloads.el would also be
>>> autogenerated?
>>> And would org-version.el still be required?
>
> I don't really know precisely what those files are about, but to the
> extent that they're specific to Org, I don't see any reason to treat
> them differently from any other org*.el file here.

Okay.

> AFAIK org-loaddefs.el is supposed to only be loaded when org-mode is
> activated, whereas org-autoloads.el is loaded at Emacs start up (so it
> should mostly contain an autoload for `org-mode` itself).

Got it, thanks.

> The elpa.gnu.org scripts will not look for the package's version in
> org-version.el but in org.el's "Version:" header, but presumably
> org-version.el is used by Org, so it's probably still useful (tho Org
> could be changed to look for the corresponding info in org.el's
> "Version:" header as well).

Yes, that's another topic.

Do you have an example of a package where M-x [package]-version RET
looks for the version in the Version: header?

-- 
 Bastien