On Sun, 05 Dec 2021 12:16:30 -0800, Felix Lechner wrote: > On Sun, Dec 5, 2021 at 12:08 PM gregor herrmann <gregoa@debian.org> wrote: > > (Just as a note, and that means I won't upload this tonight :)) > Thank you for looking into it! You're welcome. I looked a bit further, and this is not as trivial as most CPAN distributions: - perlimports in the CPAN tarball is a fat-packed script: https://metacpan.org/dist/App-perlimports/source/script/perlimports i.e. it embeds a couple of Perl modules; now we could just live it but that's neither elegant nor clever seurity-wise nor simple copyright-wise; - we could try to rip out the fat-packed parts (which still leaves the copyright question for the source package); [0] but: - the fat-packing works with an author script: https://github.com/oalders/App-perlimports/tree/main/author which already says that it uses a forked PPI module (cf. also .gitmodules in the upstream git repo) With cpanminus we have a similar situation, there we take the tarball from GitHub and not from CPAN, and create the actual script without fatpacking. (Before that we removed the fatpacked modules from the script.) But this forked PPI seems like a blocker, at least I have no good idea how to handle it right now. [1] Cc'ing my friendly fellow perl team members … Cheers, gregor [0] Cf. also https://github.com/oalders/App-perlimports/commit/7de596d7a607693ca298027bc63127e2a565f597 [1] I won't mention Monkey::Patch here. -- .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06 `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe `- NP: Joe Cocker: Rivers Rising
Attachment:
signature.asc
Description: Digital Signature