User talk:AtlasDuane
Add topicWelcome to Meta!
[edit]Hello, AtlasDuane. Welcome to the Wikimedia Meta-Wiki! This website is for coordinating and discussing all Wikimedia projects. You may find it useful to read our policy page. If you are interested in doing translations, visit Meta:Babylon. You can also leave a note on Meta:Babel or Wikimedia Forum if you need help with something (please read the instructions at the top of the page before posting there). Also worthwhile acquainting yourself with the functions of global user pages. Happy editing!
--Liuxinyu970226 (talk) 15:09, 6 February 2022 (UTC)
Script Publisher - Community Wishlist 2022 implementation update
[edit]Hello AtlasDuane,
I hope you are doing well. I am reaching out regarding the Community Wishlist Survey 2022 proposal you supported: “A bot or gadget to publish public Git repo to a gadget or user script”
Over the past few months, I have been working on implementing this as a Toolforge-based OAuth application called Script Publisher. The goal is to provide a web-based interface that allows users to publish JS/CSS files from a public Git repository (e.g., GitHub) directly to user scripts or gadget pages, with explicit preview and confirmation before publishing.
Current project links:
- Toolforge deployment (work-in-progress MVP): https://script-publisher.toolforge.org/
- Source code (public repository): https://gitlab.wikimedia.org/toolforge-repos/script-publisher/
- Initial demo prototype: https://wikipublisher.vercel.app/
The tool currently supports:
- Public repository fetching
- File selection (JS/CSS)
- Mapping files to target wiki pages
- Preview before publish
- Manual publish flow (no background automation)
The main blocker now is OAuth approval for JS-editing permissions. WMF security has raised valid concerns around applications that can edit JavaScript pages, especially site-wide JS. The discussion is ongoing here:
- User_talk:Dev_Jadiya#Script_Publisher
- https://meta.wikimedia.org/wiki/Steward_requests/Miscellaneous#OAuth_permissions
Since you originally supported this wishlist proposal, your technical input and perspective would be extremely valuable. In particular:
- Does the current MVP align with what you expected from this wishlist?
- Are there safeguards you believe are necessary for responsible deployment?
- Would you be willing to share your view in the ongoing Meta discussion?
My intention is not to bypass any security expectations, but to implement this in a way that is aligned with community review standards (similar to bots or interface editors), while keeping the tool transparent, auditable, and limited to user-authorized edits.
Thank you again for supporting the original idea. I would truly appreciate your feedback. Regards, Dev Jadiya (talk) 14:39, 7 February 2026 (UTC)