Bug#857544: groovebasin: Please package groovebasin 1.5.1
Quoting Petter Reinholdtsen (2018-10-05 09:25:39)
> [Petter Reinholdtsen]
> > I had a look at version 1.5.1, and discovered that it introduced
> > three new dependencies, googleapis, httpolyglot and yawl. The last
> > one is already in Debian, while the first two seem to be missing. I
> > registered RPFs for them to at least have done a small step in the
> > right direction.
>
> An alternative to packaging these dependencies as independent
> packages, is to embed them in groovebasin like is already done with
> four of the dependencies. They are added as d/patches/ entries. It
> can be a nice way to get an updated version into the archive, while
> waiting for the new dependencies to make it into the archive on their
> own.
>
> Embedding copies is hard to maintain archive-wise, because any
> security fix need to be applied to all the embedded copies, so we
> should be reluctant do use that approach for much used code.
Yes - avoiding embedded code copies is a "should" in Debian Policy.
I therefore recommend against expanding on that bad practice!
- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
[x] quote me freely [ ] ask before reusing [ ] keep private
Reply to: