Inital Project Skeleton fpdf2

[ennamarie19]

Approval from upstream can be found here: py-pdf/fpdf2#1195

[github-actions]

ennamarie19 is integrating a new project:
- Main repo: https://github.com/py-pdf/fpdf2.git
- Criticality score: 0.56764

[Lucas-C]

As a maintainer of fpdf2, I approve this PR.
Thank you @ennamarie19!

[DonggeLiu]

Thanks @ennamarie19
May I ask who the major users of the project are and why it is critical?
This will help the panel approve this PR.

[Lucas-C]

For the record, we keep a list of "dependent/downstream projects" of fpdf2 there: https://py-pdf.github.io/fpdf2/#they-use-fpdf2

Another list of dependent packages is provided by Wheelodex there: https://www.wheelodex.org/projects/fpdf2/rdepends/

[ennamarie19]

Thank you @Lucas-C! @DonggeLiu please see those links :)

[DonggeLiu]

Thanks! I will approve this PR once the panel decides so.

[ennamarie19]

Thanks! I will approve this PR once the panel decides so.

@DonggeLiu hey there! Has the panel had a chance to review this yet?

[DonggeLiu]

Thanks! I will approve this PR once the panel decides so.

@DonggeLiu hey there! Has the panel had a chance to review this yet?

Would you mind considering ClusterFuzzLite instead?

[ennamarie19]

Thanks! I will approve this PR once the panel decides so.

@DonggeLiu hey there! Has the panel had a chance to review this yet?

Would you mind considering ClusterFuzzLite instead?

May I ask why that instead? This repo seems to meet the usual criteria for accepted OSS-Fuzz projects.

[DonggeLiu]

Thanks! I will approve this PR once the panel decides so.

@DonggeLiu hey there! Has the panel had a chance to review this yet?

Would you mind considering ClusterFuzzLite instead?

May I ask why that instead? This repo seems to meet the usual criteria for accepted OSS-Fuzz projects.

Sure, two main reasons:

1. It has a limited number of critical users
2. It's Python-only.

[ennamarie19]

So if a repo has more critical users but is just Python, would it be accepted? Or are Python repos not being accepted anymore? On Aug 28, 2024, at 10:24 PM, Dongge Liu ***@***.***> wrote: Thanks! I will approve this PR once the panel decides so. @DonggeLiu hey there! Has the panel had a chance to review this yet? Would you mind considering ClusterFuzzLite instead? May I ask why that instead? This repo seems to meet the usual criteria for accepted OSS-Fuzz projects. Sure, two main reasons: It has a limited number of critical users It's Python-only. —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: ***@***.***>

[DonggeLiu]

So if a repo has more critical users but is just Python, would it be accepted? Or are Python repos not being accepted anymore?

Python projects may be accepted, depending on the users and the nature of the project (e.g., use C/C++ native extensions hence may have memory corruption).
The panel reviews them case by case.