{"action":"created","issue":{"url":"https://api.github.com/repos/odoo/odoo/issues/6287","labels_url":"https://api.github.com/repos/odoo/odoo/issues/6287/labels{/name}","comments_url":"https://api.github.com/repos/odoo/odoo/issues/6287/comments","events_url":"https://api.github.com/repos/odoo/odoo/issues/6287/events","html_url":"https://github.com/odoo/odoo/issues/6287","id":68041291,"number":6287,"title":"Proposal: replacing __openerp__.py with __odoo__.yaml","user":{"login":"dreispt","id":1246629,"avatar_url":"https://avatars.githubusercontent.com/u/1246629?v=3","gravatar_id":"","url":"https://api.github.com/users/dreispt","html_url":"https://github.com/dreispt","followers_url":"https://api.github.com/users/dreispt/followers","following_url":"https://api.github.com/users/dreispt/following{/other_user}","gists_url":"https://api.github.com/users/dreispt/gists{/gist_id}","starred_url":"https://api.github.com/users/dreispt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dreispt/subscriptions","organizations_url":"https://api.github.com/users/dreispt/orgs","repos_url":"https://api.github.com/users/dreispt/repos","events_url":"https://api.github.com/users/dreispt/events{/privacy}","received_events_url":"https://api.github.com/users/dreispt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":21,"created_at":"2015-04-13T08:29:44Z","updated_at":"2015-04-16T08:14:09Z","closed_at":null,"body":"It's planned to replace the `__openerp__` name for the manifest file with `__odoo__`.\r\nI propose to use that opportunity to also change the type of file from .py to .yaml.\r\n\r\nMy argument is that the manifest is actually data, not code, so it can feel awkward to have it on a code file.\r\nA more pragmatic issue is that [evaluating](https://github.com/odoo/odoo/blob/8.0/openerp/modules/module.py#L251) the `__openerp__.py` file to parse is an important security risk: it's easy to inject trojan code in a module and publish it on the App store.\r\nWith YAML we could use the safer deserialization `yaml.safe_load()`.\r\n\r\nIf I know it would be welcome, I 'm willing to propose a PR for this. (cc @antonylesuisse)"},"comment":{"url":"https://api.github.com/repos/odoo/odoo/issues/comments/93673620","html_url":"https://github.com/odoo/odoo/issues/6287#issuecomment-93673620","issue_url":"https://api.github.com/repos/odoo/odoo/issues/6287","id":93673620,"user":{"login":"clonedagain","id":391953,"avatar_url":"https://avatars.githubusercontent.com/u/391953?v=3","gravatar_id":"","url":"https://api.github.com/users/clonedagain","html_url":"https://github.com/clonedagain","followers_url":"https://api.github.com/users/clonedagain/followers","following_url":"https://api.github.com/users/clonedagain/following{/other_user}","gists_url":"https://api.github.com/users/clonedagain/gists{/gist_id}","starred_url":"https://api.github.com/users/clonedagain/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/clonedagain/subscriptions","organizations_url":"https://api.github.com/users/clonedagain/orgs","repos_url":"https://api.github.com/users/clonedagain/repos","events_url":"https://api.github.com/users/clonedagain/events{/privacy}","received_events_url":"https://api.github.com/users/clonedagain/received_events","type":"User","site_admin":false},"created_at":"2015-04-16T08:14:09Z","updated_at":"2015-04-16T08:14:09Z","body":"OK but then you should altogether deprecate YAML support in Odoo and \nmigrate the automatic tests to JSON.\nAnd maybe deprecate XML too.\nWe don't need 3 data languages do we?\n"}}