We should probably talk about how IUP is distributed.

[abonander]

@dcampbell24 @thelink2012

So, Sourceforge users are fleeing en masse after finding out that SF is adding ads to software without the project owners' consent.

This is a bit of a concern since we (KISS-UI and IUP-Rust) are asking our users to go to Sourceforge and download precompiled binaries for IUP. IUP as a project is probably flying far under Sourceforge's radar since it's not big enough to make injecting malvertising worth it, but we should probably look into solutions for getting IUP binaries out there that are much more future-proof and much less sketchy.

Travis CI has Linux and OS X workers and can integrate with GitHub Releases, which means we can mirror IUP to GitHub, have Travis build binaries for those platforms in the open--the build logs are fully available as are the scripts--and then make them available for download. We could use AppVeyor for the Windows builds, it's just about as open. I've used both platforms before.

The only downside I can see is that we should talk about how we're going to support 32-bit, as all these workers are running on 64-bit OSes. We could run the builds twice with one set to 32-bit, I guess.

What do you guys think? Should we see what IUP's author is doing about this or if he even knows? Or just go ahead with this in the spirit of open-source?

[thelink2012]

I think we shouldn't have to worry too much about SF injecting ads in IUP since well, it's a library, no installer, so not so simple to do this injection. Regarding the flying masses, I doubt Tecgraf will move.

But I do agree we should have a mirror over here.

[abonander]

Still, the future of every project on SourceForge could be in jeopardy. They could decide to close up shop any day now and we'd be plumb SOL.

I'm drafting an email to IUP's author if anyone wants to be CC'd. I'd send it to the mailing-list but I wouldn't really trust it at this point since it's hosted by SourceForge.

I'll be asking him if he knows about the problem, and if he has any plans for dealing with it, as well as letting him know what we want to do.

As for mirroring to GitHub, who should own the repo? Should we create an IUP-Rust organization and host it there?

[thelink2012]

I guess a organization could be a good idea.

[abonander]

@dcampbell24, what do you think? You were here (building a Rust project with IUP) first.

[abonander]

Reply from Antonio Scurri:

Yes, I was aware of the GIMP controversy. Actually this is not the first controversy involving SourceForge, and I don't think it will be the last.

There are always too sides. And financially I understand "some" of the SourceForge actions. GIMP is of course active, but I think they were involving GIMP for Windows, which sometimes takes a long time to update its executable. On the other hand, that doesn't justify SF embedding adds. I think they are learning from their own experiences. And they do drawback the installer with adds.

So, no I'm not planning any move from SF for IUP and other libraries we have.

Said that I also don't have any restrictions about users keeping mirrors of IUP elsewhere. Please, go ahead. Actually thank you for providing more options for IUP users. Once that mirror is settled I can add a link to the documentation so more users can find it.

So he's cool with it, he'll even link to it.

[dcampbell24]

I like this idea, including creating an organization; although, I don't think we should put Rust in the name, since it is not really specific to Rust in any way.

[abonander]

It shouldn't just be IUP so we don't give off the impression that we're the original authors. IUP-Mirror, maybe?

[thelink2012]

Hmm, what would the organization store?
Just the iup mirror? rust-iup-sys? iup-rust too?

Names....

[thelink2012]

Just for the record: There used to be a mirror on LuaDist... It's severely outdated.

[dcampbell24]

How about something like "Friends of IUP", that gives a lot of latitude as far as what it may one day contain.

[abonander]

Sounds good to me.

[thelink2012]

So hum what's next? Perhaps @cybergeek94 wants to boot up the organization since you are going to set up those IUP automatic builds?

[abonander]

Sure, I can start it.

[thelink2012]

hmm IMO the url is a bit weirdy
https://github.com/Friends-of-IUP/IUP
I think it'd be better lower case, e.g.
https://github.com/friendsofiup/iup (I like this one)
https://github.com/friends-of-iup/iup

As a sidenote iup url when clicking on it on sourceforge is lowercase
http://sourceforge.net/projects/iup/

[abonander]

Done.