GSoC Adding retriever into OSS Fuzz

[PatriceJada]

Main Maintainer @henrykironde

[github-actions]

PatriceJada is integrating a new project:
- Main repo: https://github.com/weecology/retriever
- Criticality score: 0.55757

[jonathanmetzman]

Do you have a link to the GSoC project you are working on?
Also, could we try to integrate the projects one at a time? It's a lot to integrate ~10 projects.

[PatriceJada]

@jonathanmetzman This is the link to the GSoC page https://github.com/numfocus/gsoc/wiki/GSoC-2024-GOSST and this is the issue numfocus/gsoc#470

[jonathanmetzman]

Does the main maintainer approve?

[jonathanmetzman]

How about you keep open these PRs and the first projects you make progress on, I'll merge those PRs.

[henrykironde]

@jonathanmetzman , I approve.

[PatriceJada]

How about you keep open these PRs and the first projects you make progress on, I'll merge those PRs.

@jonathanmetzman Correct me if I'm wrong but my understanding was that for the project to be accepted we need to follow these steps https://google.github.io/oss-fuzz/getting-started/accepting-new-projects/. Then once the project is merged we move to these steps https://google.github.io/oss-fuzz/getting-started/new-project-guide/

[jonathanmetzman]

How about you keep open these PRs and the first projects you make progress on, I'll merge those PRs.

@jonathanmetzman Correct me if I'm wrong but my understanding was that for the project to be accepted we need to follow these steps https://google.github.io/oss-fuzz/getting-started/accepting-new-projects/. Then once the project is merged we move to these steps https://google.github.io/oss-fuzz/getting-started/new-project-guide/

That is the correct procedure, but to be honest, no one else has tried to integrate ~10 projects at once.
For each project someone tries to add to oss-fuzz, we need to discuss whether to accept it.
This is potentially a lot of work for us. I'd rather you integrate projects one at a time so we don't spend time discussing project integrations that don't get completed.
Also, doing integrations one at a time would make it easier to incorporate feedback. For example, I think the "MSAN" option doesn't make sense here, and you should also say why the project is important and/or critical infra.

[DonggeLiu]

How about you keep open these PRs and the first projects you make progress on, I'll merge those PRs.

@jonathanmetzman Correct me if I'm wrong but my understanding was that for the project to be accepted we need to follow these steps https://google.github.io/oss-fuzz/getting-started/accepting-new-projects/. Then once the project is merged we move to these steps https://google.github.io/oss-fuzz/getting-started/new-project-guide/

That is the correct procedure, but to be honest, no one else has tried to integrate ~10 projects at once. For each project someone tries to add to oss-fuzz, we need to discuss whether to accept it. This is potentially a lot of work for us. I'd rather you integrate projects one at a time so we don't spend time discussing project integrations that don't get completed. Also, doing integrations one at a time would make it easier to incorporate feedback. For example, I think the "MSAN" option doesn't make sense here, and you should also say why the project is important and/or critical infra.

Rejecting the following PRs (including this PR) accordingly:

• GSoC Adding aeon into OSS Fuzz #12053
• GSoC Adding spyder into OSS FUZZ #12054
• GSoC Adding spyder-kernels into OSS Fuzz #12055
• GSoC Adding qtpy into OSS Fuzz #12056
• GSoC Adding qtconsole into OSS Fuzz #12057
• GSoC Adding qtawesome into OSS Fuzz #12058
• GSoC Adding python-lsp-server into OSS Fuzz #12059
• GSoC Adding pymc into OSS Fuzz #12060
• GSoC Adding pyhf into OSS Fuzz #12062
• GSoC Adding pybamm into OSS Fuzz #12063
• GSoC Adding hpx into OSS Fuzz #12064
• GSoC Adding jupyterlab into OSS Fuzz #12065
• GSoC Adding retriever into OSS Fuzz #12066
• GSoC Adding deepforest into OSS Fuzz #12067