[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#971526: ITP: briar-headless -- Core library exposing REST API



Package: wnpp
Severity: wishlist
Owner: Nico Alt <nicoalt@posteo.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

* Package name    : briar-headless
  Version         : 1.2.9
  Upstream Author : The Briar Project <contact@briarproject.org>
* URL             : https://briarproject.org/
* License         : GPLv3
  Programming Lang: Java, Kotlin
  Description     : Core library exposing REST API

Briar is a messaging app designed for activists, journalists, and anyone
else who needs a safe, easy and robust way to communicate. Unlike
traditional messaging apps, Briar doesn't rely on a central server -
messages are synchronized directly between the users' devices. If the
internet's down, Briar can sync via Bluetooth or Wi-Fi, keeping the
information flowing in a crisis. If the internet's up, Briar can sync via
the Tor network, protecting users and their relationships from
surveillance.

This package contains the Briar Headless Java/Kotlin core library
that's exposing a REST API used by python3-briar-wrapper.

Packaging briar-headless in compliance with DFSG currently isn't possible
because parts of it are written in Kotlin that isn't packaged yet in Debian.

Until it's possible to package briar-headless in compliance with DFSG, my
idea was to use official (reproducible) jars provided by the core developers
of the Briar Project and publish them as packages in Debian contrib:
https://code.briarproject.org/briar/briar-debian

Another potential problem that might occur in future is that Briar needs
full access to the Tor process and therefore ships its own Tor binary, i.e.
it's copying code. You can find more information on why it does this and how it
could be changed in future here:
https://code.briarproject.org/briar/python-briar-wrapper/-/issues/15

I use Briar Headless myself, but it was developed by other core developers
of the Briar Project. I plan to maintain this project and its dependencies
in Debian, but I'm always open to and appreciating any help by potential
co-maintainers. Additionally, I'm looking for a sponsor.

-----BEGIN PGP SIGNATURE-----
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=66H/
-----END PGP SIGNATURE-----


Reply to: