Quoting Eric Dorland (2015-05-19 21:44:50) > What's the current thinking on embedded libraries in source code? One > of my packages has an embedded (and slightly modified) version of > libevent that it links statically. It doesn't seem like Built-Using is > the right thing to use in this situation since it's not embedding > another package. However it seems like a good idea to make this > information visible somehow, for example to help the security-team > find vulnerable embedded versions of software. I believe this is what you seek: https://wiki.debian.org/EmbeddedCodeCopies - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private
Attachment:
signature.asc
Description: signature