Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
theme
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
26 May 2014 at 11:23 UTC
Updated:
28 Mar 2015 at 11:54 UTC
Jump to comment: Most recent
Comments
Comment #1
dimple_chandra commentedComment #2
PA robot commentedWe are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #3
dimple_chandra commentedComment #4
dimple_chandra commentedComment #5
gmaheux commentedHello dimple_chandra
Install and work find for me.
I tested your code with pareview.sh and it return this : http://pareview.sh/pareview/httpgitdrupalorgsandboxdimplechandra2235061git
For the first remark pareview says that your page.tpl.php it's not encoding correctly. You need to use UTF-8 encoding for your file.
The second part of remark :
5 | ERROR | Missing file doc comment => you need to add @file to the begining of your file and to give a description of your file. Take an example of the page.tpl.php in one of theme drupal core.
5 | ERROR | End of line character is invalid; expected "\n" but found "\r" => for this error it's a result of the first remark from pareview.sh
Nice work. And thanks for your contribution.
Comment #6
dimple_chandra commentedHi Jojo-M
Thanks for your review.
I have added UTF-8 in template.php and i am working on the rest.
Comment #7
gisleThe theme/module comes bundled with responsive-nav.js
responsive-nav.jsappears to be third party code/content (Copyright (c) 2013 @viljamis). Third party code/content/assets is not generally allowed on Drupal.org and should be deleted.
This particular asset is made available under the MIT license. his is considered a GPL-compatible license, which is usually allowed, but explicit permission to use from Drupal.org webmasters is still required.
This policy is described in the 3rd party libraries and content on Drupal.org. It also appears in the Drupal Git Repository Usage policy you agreed to when you signed up for Git access, which you may want to re-read, to be sure you're not violating other terms.
The Libraries API module is a recommended method for adding 3rd party dependencies without directly including the code on Drupal.org.
Comment #8
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #9
dimple_chandra commentedHi gisle,
Thanks for your review. I have fixed the theme as per your comment.
Comment #10
dimple_chandra commentedComment #11
dimple_chandra commentedComment #12
nesta_ commentedAdd Favicon
Add Features in .info file is good.
Header is more big, hide more content when scroll down.
but is a good jobs :)
Comment #13
Chetan Sharma commentedyou need to add @file to the begining of your file and to give a description of your file before line no. 4 for remove error from http://pareview.sh/pareview/httpgitdrupalorgsandboxdimplechandra2235061git
Comment #14
dimple_chandra commentedHi nguerrero,
Thanks for your review. I did the following changes as per your comment.
Comment #15
dimple_chandra commentedHi Chetan Sharma,
I have already added the @file in my page.tpl
Thanks
Comment #16
dimple_chandra commentedComment #17
dimple_chandra commentedComment #18
rivimeyAutomated Review
Pass
Manual Review
The starred items (*) are fairly big issues and warrant going back to Needs Work. Items marked with a plus sign (+) are important and should be addressed before a stable project release. The rest of the comments in the code walkthrough are recommendations.
If added, please don't remove the security tag, we keep that for statistics and to show examples of security problems.
This review uses the Project Application Review Template.
Comment #19
dimple_chandra commentedComment #20
dimple_chandra commentedThanks rivimey for your review.
I have updated the README.txt as per your comment and compressed the screenshot image.
Comment #21
rivimeyHi
Thanks for compressing the screenshot. I asked because the module's version of the image is only seen very occasionally and then usually very small. Reducing it to e.g. 256x384px would be beneficial. You can of course upload a larger image onto the drupal.org project page, where it is more useful.
I am not a security expert but I still have concerns about the security side, which is why I don't think this is ready to go at this time.
The Readme.txt is improved but the question I posed - why use this theme - is still relevant, as you suggest it is appropriate for a huge range of cases. Specific improvements would be:
- Don't say 'IE7+' but state which versions you have tested. IE7+ will be wrong (at some point) when a new IE is released.
- You haven't indicated anything about Chrome, etc, versions. I accept that is more difficult because versions change quickly ; perhaps it would be better to state what features are relied on - CSS2 ? CSS3? SVG? etc
- It would be sensible to include a note about this being a base theme and to modify it using a sub-theme (and say how to do that). IMO this is always appropriate for themes from d.o. as it gives you (the creator) a way to update with new features and/or fixes.
Comment #22
dimple_chandra commentedAs of now i have updated the README.txt with browsers version and I'm working on the rest.
Comment #23
dimple_chandra commentedComment #24
dimple_chandra commentedComment #25
dimple_chandra commentedComment #26
klausiReview of the 7.x-1.x branch (commit 1cae586):
This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. You have to get a review bonus to get a review from me.
manual review:
But otherwise looks good to me. Removing review bonus tag, you can add it again if you have done another 3 reviews of other projects.
Assigning to ELC as he might have time to take a final look at this.
Comment #27
dimple_chandra commentedThanks klausi for the review.
All the changes have been done.
Comment #28
klausino objections for more than a week, so ...
Thanks for your contribution, dimple_chandra!
I updated your account so you can promote this to a full project and also create new projects as either a sandbox or a "full" project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and stay involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Thanks to the dedicated reviewer(s) as well.