Bug#837056: ruby-babel-source: contains embedded code copies of Javascript libraries babel and core-js
Package: ruby-babel-source
Version: 5.8.35-1
Severity: important
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi,
Great that you you have packaged ruby-babel-source.
Unfortunately, in its current form this package ships Javascript
libraries babel and core-js¹.
¹ Polyfills merged with Regenerater and called "babel-polyfill":
<http://babeljs.io/docs/usage/polyfill/>
Instead, a) those libraries should be packaged separately, tracking
their own upstream sources <https://github.com/babel/babel> and
<https://github.com/zloirock/core-js>, b) babel-polyfill should be
packaged separately (either build-depending on Regenerator or created
some way), and c) this package should symlink those libraries and depend
on those other packages.
See Debian Policy § 4.13 for more info.
- Jonas
-----BEGIN PGP SIGNATURE-----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=fpIj
-----END PGP SIGNATURE-----
Reply to: