kenmcd wrote:How will it be determined that the commercial or other extensions listed on these websites are GPL and JED compliant?
How will the "policing" of the non-JED-listed extensions be handled?
How will it be determined that these other extensions do not have obfuscated/encrypted code?
If they require a fee to download many users are never going to examine the extension.
If they are not listed in the JED no files have been submitted for review when a listing is requested.
The same way it is currently being handled. We rely on user reports as well as catch them when screening new submissions. Their usually pretty easy to catch just by reading the developers license page.
kenmcd wrote:Extensions listed in the JED are regularly found with obfuscated/encrypted code.
I have found two myself in the last few weeks (reported and removed from the JED).
From this I assume there are many other extensions found by other users as well.
It appears to be an ongoing problem.
We find 2-3 a month. Just about all of them are just obfuscated back links. I think the only ionCube issues we found in the past 6 months were extensions that were listed pre-GPL, were rarely used and rarely updated so they didn't get caught.
kenmcd wrote:Currently there is no public history of bad behavior so it happens over and over.
Anyone who has been around awhile and has a good memory knows there are some "bad" players out there.
These "bad" players are still in business because the current secrecy policy hides their bad deeds.
A 'wall of shame' is really for another thread but I will say 99% of the issues we have boil down to someone not reading the rules or a language translation failure, which is why Brian has volunteered to help developers in that area.
kenmcd wrote:What really needs to be discussed is how to improve the developer summary page.
The current focus is on rating the extensions with little attention to the developer (which creates the biggest user problems).
Perhaps a new thread on that subject would be appropriate, and very useful discussion.
That discussion will happen. Converting to Joomla 3.0, we will be replacing MTree with a completely custom extension and once we get the core system stable we'll be looking at profiles and new features.