Re: Why are so many great packages not trying to get included in GNU Emacs?

[Dmitry Gutov]

On 12.05.2020 22:48, Clément Pit-Claudel wrote:
> So, instead of adding a line, the author could sign the commit with their PGP key, saying 
> "all these changes are mine or from sources owned by FSF" (a bit like a 
> developer certificate of origin).

Considering that signed commits are not ubiquitous, it seems to be not a 
trivial thing to do. Also, we'd need some recourse in case when some 
commits have slipped by that are not signed anyway. Or are signed by a 
key that Savannah doesn't know about (or whatever other database we'd be 
using).

I was suggesting to sign tagged commits (for example), which seems more 
feasible, but keeps the responsibility of checking the copyright status 
on the author. The the reasons to do that would be different (basically, 
security).