TYPO3 Core

But there have not been any extension reviews for years

wrong, last one was for civserv (in summer 2007 - less than 2 years)

and there no reviews are planned for the future.

wrong, how do you get to assume this? I cannot disclose details but a review is currently going on.

I tend to close this issue as there are Core Team members who like to keep this checkbox. (@see discussion in typo3.dev)

topic 'Re: [TYPO3-dev] Removing "enable extension without reviews" checkbox'

Benjamin Mack a écrit :

Hey,

I personally think that it worries people (that they need to disable the
checkbox -- how do they know why they should disable it? we know because
we did it for 100+ installations, but let's don't forget the newbies).

Here are my suggestions:

1. In the Extension Manager, add a link:

• List or look up reviewed extensions [search in all extensions]

To make it easier for people to switch but still have the user know
about the difference.

2. Update the documentation in the EM about revieweing (what it actually
means and that there are only a few reviewed). Maybe even a link on a
TYPO3.org page to keep the info up to date.

3. Make the reviews based on date.
Basically a link that says: Was last reviewed on 2009-05-04 with version
1.4.5 and proven secure.
And then it's reviewed for 6 months or if the version has not changed.

4. It's hard to keep up reviewing an extension that is releasing a minor
fix every 1-2 months.
Maybe if we'd have a nice diff-system for every extension update (and
the security team actually only sees the modified lines and can update
the review with a few clicks), that would help too.

All the best,
Benni.

That last quote just proves what I wrote previously. A complete removal of the checkbox is not desired.
-> Therefore I'm hereby closing this issue.