Re: Minified javascripts in packages
On Mon, Apr 13, 2015 at 12:22 AM, Bastien ROUCARIES wrote:
> I prefer from a lintian maintainer point of view to rebuild everything
> from source. At least it is easier to detect.
That is indeed preferable since we can then prove we are distributing
the source but it is unlikely we can get there any time soon. Examples
include all the packages not using dh-autoreconf, autotools-using
packages that don't build-depend on other packages containing m4
macros they embed, firmware-linux-free and other firmware packages,
fonts, things that can only be built manually because they have
interactive build tools, things that have build-deps that are
hard/complicated to package (such as the Flash/Flex SDK), packages
that behave differently when built from source on Debian and so on.
> Please also help me to improve source-is-missing tag. It has a lot of
> override and it will be better to automatically detect false positive.
I think we need to do an archive-wide audit of all lintian overrides,
I'm not convinced that most of them were added in good faith.
--
bye,
pabs
https://wiki.debian.org/PaulWise
Reply to: