[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: "Browserified" stuff

On 14455 March 1977, Adam Borowski wrote:
> On Sat, Oct 08, 2016 at 10:45:08PM +0200, Joerg Jaspert wrote:
>> we had a discussion inside the FTP Team about the "browserified js"
>> issue. We understand that "browserified" refers to various changes to
>> the original source, from concatenating multiple (local and remotely
>> fetched) files together, arbitary transformations (down to something
>> akin to compilation), minifying and others. Not all "browserification"
>> may necessarily use all of those ways.
> [...]
>> - We acknowledge that it appears to be a big task to provide a proper
>>   "browserification" environment within Debian. Due to the freeze coming
>>   up we would understand the Release Team granting an RC exception for
>>   stretch for such non-sources already in main, with the condition that
>>   this will not extend to another release.
> Could you please suggest some stick to ensure that the condition you mention
> is actually enforced?  I've got an impression that once a RC exception is
> granted, it stays forever, renewed around every freeze.

First of they have to grant it. I have no idea if they do or not, not
having asked them at all.
Second - the enforcing will have to come from us ftpmasters - by
removing the packages at some point, if they don't get fixed.

> Another issue is, as mentioned in the TC discussion, the inability to fix
> any non-trivial security bugs in stable.  I can't quite imagine the Security
> Team hunting for a specific old version of grunt and all of its extensive
> dependencies to rebuild the buggy package.  Such state hits the definition
> of "contrib" exactly, why not actually use it for this purpose?  Demotion of
> libjs-handlebars would require changing or demoting two more packages:
> prometheus and kcov, which would be a hassle but not the end of the world.

I would understand the security team to define them as "not supported
(unless the maintainer does all the work)", and yes, contrib is IMO the
way better place for them.

bye, Joerg
<_DeadBull_> ohne speicher, tastatur, mouse, pladde, monitor, also nur die

Reply to: