I wonder if we should change the policy to waive the review requirement for packages that are generated using this tool. I feel like having manual reviews of these packages creates a lot of unnecessary work.
The things Robert mentioned still need to be checked for tool-generated specs. We still need to check the content is acceptable, the license is OK, and all of that stuff. A spec generator does not and cannot check that for us.
Sure experienced packagers from the SIG could probably do it, but another pair of eyes is always a good thing. And the licensing can be tricky sometimes.
For newcomers, I don’t think saying you can self review Go/Rust packages is a good thing.
Perhaps “batch reviews” would be a more appropriate means of streamlining the review process? Templated Go and Rust packages often show up in big bundles, like @eclipseo’s 49 here, because they’re all pulled in as new dependencies for some other package that’s the “real” final target. So perhaps there’s a way those here-because-they’re-needed-more-than-wanted dependency packages could be bundled up into a single Review Request ticket and done all together, even though they’re not actually related (beyond all being dependencies of the same also-unrelated package)?
Perhaps even a slightly-modified form of perfunctory, streamlined “Templated Packages Review Request”, where it focuses exclusively on the things mentioned in the OP, and cuts out all the other chaff that normally has to be ignored while performing reviews of such packages.
Self-review sets up an inherent conflict of interest. When the submitter’s goal is to get their package added to Fedora in a short time frame, it is inevitable that shortcuts will be taken; even with experienced packagers this happens. Effective review needs an independent 3rd party whose primary motivation is analysing the packaging guidelines, not adding the package.
Yeah, self-review isn’t even really review. I mean, we’re all supposed to look over our packages and ensure they meet the guidelines before submitting them anyway, so self-review is really already part of the process. But a second, independent pair of eyes is the critical check that keeps us from getting lazy.
Express inspired web framework written in Go