Since "It is recommended that you only upload modules from trusted sources such as drupal.org.", perhaps a list of such sources could be added to the interface? This would function somewhat like Firefox's extension sources gizmo I suppose.

The module could come with drupal.org as a pre-approved source, with options to add and remove sites from the list. Seems like it would be relatively trivial to implement (he said, again).

Comments

shawn conn’s picture

shawn conn commented

Yeah, that sounds like one good idea. There's a number of ideas I've been thinking of to try to make this module more secure. I put out the initial release to get its basic functionality tested,

niklp’s picture

niklp commented

Ok I'll give the module a whirl tonight, hopefully more ideas will become obvious.

Am I correct in assuming that this module is really best used on its own in a standalone Drupal setup? I mean, it serves no other purpose that to do these builds, right?

shawn conn’s picture

shawn conn commented

Pretty much. Its possible to upgrade existing modules too (I have only done a few test cases with this), but it seems upgrading would only be useful for live sites that shouldn't really have this code running on it in its current state.