On Tue, 26 Sep 2017 07:50:11 +0000 (UTC), you wrote:
On 2017-09-26, Richard W.M. Jones <rjones(a)redhat.com> wrote:
> On Tue, Sep 26, 2017 at 07:18:12AM +0000, Petr Pisar wrote:
>> A packager is responsible for reviewing the code before uploading it to the
>> Fedora infrastructure. It does not mattter whether the code matches what
>> upstream released. Actually in some cases the code is intentionally
>> changed by the packagers (e.g. when removing bad-licensed code).
> Are there any tools you'd like to suggest for reviewing 100GB
> (or even 10MB) of code?
diff. First you review 100GB code, and then you review differences only.
Actually you do not need to review 100GB of code. You can unbudle it
first. I doubt the 100GB were written from scratch.
That may be fine for any packagers who are actually paid to package
(though even then I would have my doubts that every line of source has
been checked), but it is clearly an impossible task in terms of time
required for all the volunteer packagers.