Hi Yadd, On 20-02-2021 08:43, Yadd wrote: > node-uglifyjs-webpack-plugin is RC-Buggy because upstream is dead since > July 2019 (#977311). The main problem to remove it is that it requires > to update webpack which has many reverse dependencies. I tried it in > experimental branch but it is not simple and requires many patches in > many packages. We came to the same conclusion some time ago and it's on our can-defer list already (which is less definite than ignore, and means we'll go over it in due time). https://udd.debian.org/dev/bugs.cgi?merged=ign&rc=1&format=html&release=bullseye_and_sid&done=ign&deferred=ign&rtbullseye-is-blocker=ign&rtbullseye-can-defer=only&keypackages=only&cpopcon=1&chints=1&ckeypackage=1&ctags=1&cdeferred=1&caffected=1&cmissingbuilds=1&clastupload=1&crttags=1&cautormtime=1&cwhykey=1&cbritney=1&sortby=last_modified&sorto=asc&#results > I think JS Team is able to maintain node-uglifyjs-webpack-plugin is case > of security problem. That's why I think we could ignore #977311 and > #982766 for Bullseye. Thanks for contacting us. Paul
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature