Reinhard Tartler <siretart@gmail.com> writes: > On Tue, Jul 2, 2024 at 12:21 PM Simon Josefsson <simon@josefsson.org> wrote: > >> Hi >> >> Thanks for noticing this -- the reason I hesitates was exactly because I >> felt uncertain which namespace and which implementation to promote here. >> There is only a little difference between these two packages, but maybe >> some package somewhere breaks if we use one of them instead of the >> other? Which code path to pick? I do agree it would be nice for one >> package to export both namespaces, if indeed that really works. Maybe >> it is sufficient that it works for at least ONE package that use the >> AdamKorcz namespace AND at least ONE package that use the AdaLogics >> namespace? Then we know there is reusability of the shared code without >> causing breakage. If some package eventually breaks as a result, we >> have to figure out what to do about the situation later on. >> >> Thoughts? >> > > May I ask why you have packaged this? I don't see any other package > build-depending on this package (in build-rdeps > golang-github-adamkorcz-go-fuzz-headers-1-dev). It was mentioned in go.mod of 'rekor', 'golang-github-sigstore-rekor', 'cosign' and maybe some others. It was one of my first Go packaging work, and I hadn't learned the subjective art of pruning Go dependencies yet (still learning that...). I think we can live without it, but I've seen it (and the original AdaLogics package) used in some other packages so maybe eventually we want to have it? Avoiding the source-only upload to leave it in unstable only seemed like a not too bad state, but maybe a proper bug report (citing this thread) would be a better way. Do you need it for some package? Then I don't see a problem uploading it, but I'm a bit swamped on other matters right now. > Looking at the difference between the two branches, it seems that the fork > contains 9 additional commits that appears to only be adding functionality: > https://github.com/AdaLogics/go-fuzz-headers/compare/main...AdamKorcz:go-fuzz-headers-1:main > > With this, I think we can just install a symlink as suggested at > https://go-team.pages.debian.net/packaging.html#_upstream_package_moves Yes, sounds fine. /Simon
Attachment:
signature.asc
Description: PGP signature