Subject: Re: Request for Code Review: BPGSQL
To: Rich Jones <miserlou@gmail.com>, pgsql-hackers@postgresql.org
References: 
 <CADJYzxJ2JZ-G0cs-pL-5Hp8DSBpBo1gu2O4-Yq9g2-R_hZ2A9g@mail.gmail.com>
 <56BC8C11.1000505@gmail.com>
From: Jacek Wielemborek <d33tah@gmail.com>
Message-ID: <56CF2FB8.4080608@gmail.com>
Date: Thu, 25 Feb 2016 17:45:44 +0100
MIME-Version: 1.0
In-Reply-To: <56BC8C11.1000505@gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="5MSbBXvVBm4rmNcRDmm1gaTwvpDAU3xrr"
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--5MSbBXvVBm4rmNcRDmm1gaTwvpDAU3xrr
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

W dniu 11.02.2016 o 14:26, Jacek Wielemborek pisze:
> W dniu 11.02.2016 o 14:06, Rich Jones pisze:
>> Hello, team!
>>
>> I am writing on behalf of the BPGSQL Project [1] to request a code aud=
it
>> from a core PGSQL team member.
>>
>> The current maintainer is worried about the security of the code, and =
is
>> considering closing the project unless it can be properly reviewed [2]=
=2E As
>> a project living downstream[3] of that client library, I'd obviously m=
uch
>> rather see that project get reviewed rather than see it die.
>>
>> Would anybody here be so kind as to volunteer to give BPGSQL a code re=
view
>> from an upstream developer's perspective? It would have a lot of value=

>> downstream users who want to use Postgres on Amazon RDS for serverless=

>> applications, and I'm sure in plenty of other places.
>>
>> Thanks very much!,
>> Rich Jones
>>
>> [1] https://github.com/d33tah/bpgsql
>> [2] https://github.com/d33tah/bpgsql/issues/7
>> [3] https://github.com/Miserlou/django-zappa/issues/3
>>
>=20
> Hello,
>=20
> Thanks Rich, I second the request for a code review.
>=20
> I felt I'd add that this is a 1500-line pure-Python PostgreSQL client
> module that I inherited after Barry Pederson. After I realized how
> execute() is implemented, I have my worries and I'd rather not risk
> making my users vulnerable.
>=20
> I'd be really grateful if somebody who knows a bit of Python and the
> guts of PostgreSQL could speak up on this one.
>=20
> Cheers,
> d33tah
>=20

Hello,

I just unsubscribed from the mailing list so please CC next time you
post a reply to this thread.

Cheers,
d33tah


--5MSbBXvVBm4rmNcRDmm1gaTwvpDAU3xrr
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=y0wS
-----END PGP SIGNATURE-----

--5MSbBXvVBm4rmNcRDmm1gaTwvpDAU3xrr--