Re: Alternative to Source Forge for Octave Packages (Was : Re: pdepe)

[Carlo De Falco]

On 31 May 2016, at 08:09, Oliver Heimlich <address@hidden> wrote:

> The security issue happens before running automatic tests (we are
> talking of BISTs?). You could do the latter with:
> 
>       pkg ("load", "packagename")
>       __run_test_suite__ ({pkg("list", "packagename"){}.dir}, {})
> 
> As you point out, this will run (unverified) code on the users machine.

My concern was actually that arbitrary code may be run on the CI server,
we could avoid it to run on users' machines by not allowing to download
package versions that do not pass all tests and making tests fail if forbidden
actions are detected when running the test suite on the CI server...

c.