Re: Idea for discussion about NSE scripts

[Emiliano Ticci <emiticci () gmail com>]

Hi,

Totally agree with Kostas idea.

Happy to be involved in the discussion if you need two hands :)

On Mon, Jan 7, 2019 at 1:44 PM Kostas Milonas <milonas.ko () gmail com> wrote:

> Hello everyone and happy new year!
>
> During the last 2-3 months I contributed with a few NSE scripts which
> unfortunately didn't get merged
> or reviewed. I know everyone is putting their efforts whenever possible
> and I totally appreciate their time.
> But I'm not here to complain! I just wanted to propose an idea for
> discussion!
>
> I think that NSE scripts, because of their nature, are more approachable
> to contribute than the core.
> Also, contributing with NSE scripts sounds more frequent, as a new script
> could be added to the project
> every time a new vulnerability is revealed.
>
> So, could the NSE scripts (along with or without the lib) benefit from
> being in a separate repo?
> - pull requests could get merged more frequently
> - could have separate administration from the core nmap repo (more people
> reviewing and merging,
>   without the fear of others messing with the core nmap repository)
> - in the future, could more easily lead to allow users to update their
> system with new scripts and update
>   the existing, using a simple nmap command or just do so using their
> package manager.
>
> I know that this would trigger changes on the distribution (in the sense
> of distro packages) and the build
> process, in order to meet the current state but thought that it could
> worth the discussion.
>
> I'd love to hear your feedback.
> Thanks in advance,
> Kostas
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/