On Fri, 22 Mar 2013 08:53:05 +0100, Thomas Koch wrote:
> Second thing is with source tarballs or Git repos. For building a Debian
> package we need a source tarball that does not contain any non-free or binary
> artifacts.
What's equally annyoing are tarballs/zipfiles that don't contain the
code directly but yet another couple of compressed files.
E.g.
% wget http://www.jgoodies.com/download/libraries/common/jgoodies-common-1_6_0.zip
% unzip -l jgoodies-common-1_6_0.zip
0 2013-01-22 18:21 jgoodies-common-1.6.0/
0 2013-01-22 18:21 jgoodies-common-1.6.0/docs/
[...]
178747 2013-01-22 18:21 jgoodies-common-1.6.0/jgoodies-common-1.6.0-javadoc.jar
59133 2013-01-22 18:21 jgoodies-common-1.6.0/jgoodies-common-1.6.0-sources.jar
19086 2013-01-22 18:21 jgoodies-common-1.6.0/jgoodies-common-1.6.0-tests.jar
31348 2013-01-22 18:21 jgoodies-common-1.6.0/jgoodies-common-1.6.0.jar
2615 2013-01-22 18:21 jgoodies-common-1.6.0/pom.xml
> The typical ant project has a lib/ folder containing jars. We need
> to repackage and get rid of the lib/ folder. So it's generally a good thing if
> projects move to maven or use at least ivy.
It also helps if there's some file stating where foo.jar comes from,
its version and possibly the copyright/license.
Cf.
http://sourceforge.net/p/jabref/code/ci/cfb55c0c85ba9d743b6275eafff296c0de7e7c18/tree/jabref/lib/licenses.txt
for a good example.
(Of course not having to remove lib/*.jar in the first place is preferrable.)
Cheers,
gregor
--
.''`. Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
: :' : Debian GNU/Linux user, admin, and developer - http://www.debian.org/
`. `' Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
`- NP: Peter Jones: I'll be there for you
Attachment:
signature.asc
Description: Digital signature