@wouterj@phpc.social avatar

wouterj

@wouterj@phpc.social

Docs & Core team member at :symfony: Symfony;
Software Engineer/DevOPs at https://mywheels.nl;
TU Eindhoven Building Architecture graduate;

This profile is from a federated server and may be incomplete. Browse more on the original instance.

ramsey, to php
@ramsey@phpc.social avatar

Is there anything like symfony/asset-mapper (and symfony/asset) that folks can recommend using with a non-Symfony app?

I can probably figure out how to use these by themselves, but I'd prefer a general, stand-alone library/tool, rather than attempting to shoehorn a package into a non-Symfony app.

That is, unless someone can point me to a tutorial that shows how someone else has already done this? ๐Ÿ˜

wouterj,
@wouterj@phpc.social avatar

@ramsey what exactly do you want to use of AssetMapper?

It's basically a very thin wrapper (CLI commands, twig functions) to ease generating an importmap. And this integration also automatically versions assets.

I've not used AM in either Symfony or non-Symfony application, but I guess I would just generate the importmap manually in that case (https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script/type/importmap).

imperator, to php
@imperator@freifunk.social avatar

@pollita I just read the called "RFC1867 for non-POST HTTP verbs". You were the only one voting "No" - I wonder why. Was that a "No, we don't need that" or did you have specific reason, maybe a technical one?
https://wiki.php.net/rfc/rfc1867-non-post

wouterj,
@wouterj@phpc.social avatar
welcomattic, to random French
@welcomattic@phpc.social avatar

A 24 years old bug has been discovered in iconv in glibc, it impacts PHP engine.

CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-2961
More detail in video: https://www.youtube.com/watch?v=kQdRT2odUIk

wouterj,
@wouterj@phpc.social avatar

@welcomattic this is a bit of misinformation unfortunately. As far as I know, it doesn't affect the PHP engine.

You can be affected by the bug in glibc if you're using the PHP iconv extension though (and enabled ISO-2022-CN-EXT in glibc).

Afaik, glibc is dynamically linked by PHP so what you need is to upgrade glibc to a patched version (which most distributions provide by now).

https://phpc.social/@heiglandreas/112319156714872060

heiglandreas, to random
@heiglandreas@phpc.social avatar

Another case of Symfony suffering from NIH-syndrome unfolding... ๐Ÿ˜•

๐Ÿ’”

wouterj, (edited )
@wouterj@phpc.social avatar

@heiglandreas I might be missing something here, but these two are not in the same problem field, are they?

Symfony has a PropertyInfo component for years, which uses PHPstan and phpDocumentor's type packages (the one you're linking here!) to resolve property types. This component used to have a single Type DTO class representing all type information.

Last year, some community members proposed the TypeInfo component as a better replacement for this Type class (https://github.com/symfony/symfony/pull/52510).

wouterj,
@wouterj@phpc.social avatar

@jaapio @heiglandreas yes, I saw it later this morning.
Let's keep talking and see where our needs overlap and we can work together, just like on the rst parser.

wouterj,
@wouterj@phpc.social avatar

@jaapio @heiglandreas I just always get very triggered by people mentioning NIH in Symfony.

For me, it feels like we get accused of having a secret plan to get all PHP packages to start with "symfony/" in some years.

From working in this group, I know this is not the case and we're all just eager to write code and publish features (+ save ourselves maintenance time). Most of our discussions happen in the open on GitHub and we have no secret bad intentions to any individual on this world.

wouterj,
@wouterj@phpc.social avatar

@jaapio @heiglandreas I realize this sometimes isn't the feeling that we get across.

Async communication, and textual async communication in particular, looses a lot of emotion and can result in bad feelings for people reading them.

Please reach out to us if this is the case, like you did. We'll learn from it, be better at communication in the future, and create new contacts with the PHP community for the better of everyone.

wouterj,
@wouterj@phpc.social avatar

@heiglandreas I agree, let's become more converging as a PHP community and ping authors of relevant packages in the community reviews (if we know them ofc).

That said, I think this also applies to how we deal with it afterwards. Messages like your first post often result in a more diverging community. Let's try to understand, from both sides, and not shoot one-liners. People reading the message don't know about those "great chats" and will only remember Symfony being the bad guy.

/cc @jaapio

wouterj,
@wouterj@phpc.social avatar

@Skoop the reality is that there is very little plan. If we say we don't have a roadmap, we mean it :)

For those announced at conferences, the component is just as much as a surprise for you as it is for the core team (I'm also totally not sure if that's a good thing!)

For all other components, the first time we hear about it is when the PR with a draft idea is opened. This applies to components created by core team members, and by ones created by community members.

cc @heiglandreas @jaapio

wouterj,
@wouterj@phpc.social avatar

@Skoop @heiglandreas @jaapio to illustrate and be totally open about this: at the moment we have a couple components that we consider for future Symfony versions on GitHub. All of them are initiated outside of the core team (just like TypeInfo was) and currently in review, test and mature phase:

https://github.com/symfony/symfony/pull/51741
https://github.com/symfony/symfony/pull/51718
https://github.com/symfony/symfony/pull/54013
https://github.com/symfony/symfony/pull/53213

dantleech, to random
@dantleech@fosstodon.org avatar

Almost afraid to ask because it's a fun project, but are there any open source tools which can plot a GPX on OSM map tiles and export to an image/PDF?

Context: plotting maps for the local running club.

wouterj,
@wouterj@phpc.social avatar

@dantleech I would expect GIS tooling, like QGis, to be able to do this. But be warned: this is yet another deep hole that has the potential to sink lots of hobby time ๐Ÿ˜…

wouterj,
@wouterj@phpc.social avatar

@dantleech ah, didn't realize you were looking for something to script (I know, I could have known better).

I've made map PNGs with R and Python in the past, but that was so much copy-pasting things that I can't even recall which libraries I used. And you also need to parse gpx, although that shouldn't be too hard.

wouterj, (edited ) to php
@wouterj@phpc.social avatar

Heartbreaking news from long time Symfony core team member Ryan Weaver:

"So.... I have incurable brain cancer and I'm asking for your love & support ๐Ÿ’–"
https://twitter.com/weaverryan/status/1777326885292114048

Ryan is the most welcoming, supportive, passionate and dedicated person I know in the community. I'm 100% sure he has supported every person in Symfony through his work.

Please give back some support to Ryan, Leanna and Beckett and show the warmth of the PHP family! https://gofund.me/f8e28d5f

ocramius, to random
@ocramius@mastodon.social avatar

Possibly weird idea: record all past review feedback as part of git blame metadata.

I find that a lot of "we'll do it later" or "acceptable tradeoff" is lost in comments detached from git itself :|

wouterj,
@wouterj@phpc.social avatar

@ocramius at Symfony we use git notes for this: https://git-scm.com/docs/git-notes

Upon merging, the PR discussion is copied into a git note and attached to the merge commit.

Cc @heiglandreas @dantleech

wouterj,
@wouterj@phpc.social avatar

@pierstoval @heiglandreas @ocramius @dantleech indeed, we do all merges using a small internal tool (which also checks CI checks, approval rules, etc.).

This tool uses the GitHub API to get all PR comments, dumps them to a ".notes" file and adds this file as a git note: "git notes --ref=github-comments add --file=./.notes"

ramsey, to random
@ramsey@phpc.social avatar

โ€œFirst of all, the world owes Andres unlimited free beer. He just saved everybodyโ€™s arse in his spare time. I am not joking.โ€

https://doublepulsar.com/inside-the-failed-attempt-to-backdoor-ssh-globally-that-got-caught-by-chance-bbfe628fafdd

wouterj,
@wouterj@phpc.social avatar

@derickr @afilina @ramsey exactly this. I don't want to quit my day job, so giving me money won't help me with time management (assuming I was the sole maintainer of a package).

I feel like the best way to help these maintainers is to help them with all the "chore work" (packaging, releasing, handling CVEs, doing regular security audits, etc.).
I feel like foundations should be the driver for this, and companies should invest in these foundations (but I know it's much easier said than done)

rob, to random
@rob@akrabat.com avatar

The interesting thing about the xz attack is that as humans we tend to trust after time has passed.

A senior dev starts working for a company in 2021 is a trusted senior dev by 2024.

Someone starts regularly contributing to an OSS project in 2021 is a maintainer by 2024.

wouterj,
@wouterj@phpc.social avatar

@rob @jaapio as many others have also said, I think this is logical for projects like this.

It's no longer "innovative", there aren't many changes and as a result very little visibility for projects like this and their contributors.

wouterj,
@wouterj@phpc.social avatar

@rob @jaapio I'm afraid the only way to help these packages is by having contributors that do not do this because they want it, but because they are paid to do it.

However, even if companies know their full supply chain, they can't possibly help maintaining all their dependencies up to this deep. It's a very hard problem to tackle...

wouterj,
@wouterj@phpc.social avatar

@rob @jaapio I 100% agree with this.

However, you are much more likely to become a maintainer in projects with a lack of contributors in the first place (although I realise I've literally grown up inside a very extreme bubble where there is an abundance of maintainer-worthy people).

Which is why I believe foundations/companies can play a crucial role in the social side of things here, as they can help removing the need to recruit new maintainers in the first place by assisting the maintainer.

cam, to php
@cam@hachyderm.io avatar

moving from docker-compose to just โ€œcomposeโ€ is, presumably, just to confuse hard working programmers ๐Ÿ˜ฉ

wouterj,
@wouterj@phpc.social avatar

@Crell @cam it's great news though: https://compose-spec.io/

This would mean you can potentially use the same compose config to run an application using Docker, Podman, and maybe even a k8s variant.

codito, to Symfony Polish
@codito@mas.to avatar

It's actually quite funny that I became contributor in 2024, after many years of working with it, and I did it with one-line fix that adds a fallback for possible non-existing array key fetch. What a contribution! ๐Ÿ˜‚

https://github.com/symfony/symfony/pull/53944/files

wouterj,
@wouterj@phpc.social avatar

@codito you learned about the contribution process though, which will help you next time you contribute.
My first Symfony fix was fixing a variable name in a documentation example ๐Ÿ˜…

wouterj, to Symfony
@wouterj@phpc.social avatar

Played a bit with statistics this week: The average age of PHP code lines in

75% of the lines are edited within the past 4 years. That's pretty amazing for a codebase that is 15 years old!

Also interesting to see some components that were more or less feature complete from the start (Mime, RateLimiter, etc.) and needed very few changes after their release.

wouterj,
@wouterj@phpc.social avatar

@sebastian I gathered the information per line using find+git-blame.
The data analysis is done with a small PHP script that generates JSON.
Finally, the diagram is rendered as SVG by some custom JavaScript code.

I might one day streamline the process more and publish it to GitHub.

wouterj, to Symfony
@wouterj@phpc.social avatar
wouterj,
@wouterj@phpc.social avatar

@thepanz this is a PR I'm preparing for Symfony. The scrollbar code is incredibly badly written at the moment. Once it's cleared up and the last bugs are fixed, I'll open a PR.

The list itself is a decoupled class, which you should be able to use for your use-case as well (actually, I was planning on improving Symfony's autocomplete question feature using this class as well in a future PR).

wouterj,
@wouterj@phpc.social avatar

@graphite thanks!

The colors are from a list of HTML colors supported by browsers. Unfortunately, graphite is not yet one of them

  • All
  • Subscribed
  • Moderated
  • Favorites
  • โ€ข
  • provamag3
  • kavyap
  • everett
  • ngwrru68w68
  • magazineikmin
  • InstantRegret
  • DreamBathrooms
  • Youngstown
  • normalnudes
  • slotface
  • ethstaker
  • osvaldo12
  • mdbf
  • rosin
  • megavids
  • khanakhh
  • cubers
  • vwfavf
  • Durango
  • Leos
  • cisconetworking
  • tacticalgear
  • thenastyranch
  • tester
  • modclub
  • anitta
  • GTA5RPClips
  • JUstTest
  • All magazines