about me (as this is my first post here):
i am interested in jitsi and especially otr4j, for using them to
communicate with friends (most of which are no techies). i already
convinced 3 friends, and encountered various small usability problems and
errors, which i would like to help to smooth out. i have a college
education in software development and spent a lot of free time working on
free software projects, predominantly in java, followed by C++ and C. i am
used to git and pull requests.
i list some things here that i noticed and what i would like to do (mostly
with otr4j). i am new, and thus it may all be related due to me having
insufficient insight into code and dependencies yet, so i would just like a
bit of feedback if possible, or one or two OKs.
otr4j versioning scheme:
i saw that pom.xml (latest otr4j github commit) uses plain numeral versions
(for example "0.22"), instead of the Maven standard snapshot system.
I personally already ran into a minor problem with that, and thus would
like to ask whether it would be ok to switch it to the snapshot model,
which works like this:
only release commits have a version like "0.22". all other commits have a
version like "0.22-SNAPSHOT".
this makes sure that if one sees/uses a normal version like "0.22", one can
be sure to always have the same commit/version of the package, which is
also usually more or less stable. if one wants to use/try dev versions, one
has to manually change (for example the dependency version tag in the jitsi
project) to a snapshot version.
this seems to be kind of buggy with the current jitsi git version, and i
would like to fiddle with that too, if noone else is doing that already/it
what i saw for example, was that sometimes authentication seemed ot just
stop in the middle of the process without any error message, and for the
shard secret way of authenticating, it even just failed without asking the
second party for the secret.
ort4j Maven reporting:
i would also like to introduce some maven reports for ort4j, mainly PMD (&
CMP), FindBugs and Checkstyle, to make the code a bit more standard, and to
remove minor or medium possible problems.
i think this is kind of useful for security relevant code.
thanks for jitsi and otr4j!