[med-svn] [snakemake] 03/04: Mention remaining potential privacy breach issues in debian/README.source

[Andreas Tille]

This is an automated email from the git hooks/post-receive script.

tille pushed a commit to branch master
in repository snakemake.

commit 830e47d54b3ca4d07151d37e49427fb39637e1f7
Author: Andreas Tille <tille at debian.org>
Date:   Tue Dec 12 11:33:57 2017 +0100

    Mention remaining potential privacy breach issues in debian/README.source
---
 debian/README.source                         | 15 +++++++++++++++
 debian/changelog                             |  1 +
 debian/patches/0011-fix-privacy-breach.patch |  3 +++
 3 files changed, 19 insertions(+)

diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 0000000..dd34b03
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,15 @@
+The documentation for snakemake contains potential privacy breach issues
+since it is refering to external active code.  Most of these are dealt
+with in 0011-fix-privacy-breach.patch.  Here are the remaining issues:
+
+  1. Package python3-theano contains
+        /usr/lib/python3/dist-packages/theano/d3viz/js/dagre-d3.min.js
+     which could be used to replace
+        http://cpettitt.github.io/project/dagre-d3/v0.1.5/dagre-d3.js
+     However, simply adding a python3-theano dependency sounds obscure.  So
+     rather https://github.com/cpettitt/dagre-d3 should be packaged seprately.
+  2. JavaScript library
+        https://silviomoreto.github.io/bootstrap-select/
+     should be packaged to solve the two remaining issues.
+
+ -- Andreas Tille <tille at debian.org>  Tue, 12 Dec 2017 11:32:28 +0100
diff --git a/debian/changelog b/debian/changelog
index cf8b165..5a64cef 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -20,6 +20,7 @@ snakemake (4.3.1-1) UNRELEASED; urgency=medium
   * Avoid privacy breach.  The tradeoff is that the local static copy might
     become but people interested in latest information will read online
     anyway.
+  * Mention remaining potential privacy breach issues in debian/README.source
 
  -- Christian M. Amsüss <chrysn at fsfe.org>  Mon, 11 Dec 2017 20:51:06 +0100
 
diff --git a/debian/patches/0011-fix-privacy-breach.patch b/debian/patches/0011-fix-privacy-breach.patch
index 76c0e9e..b55a0cc 100644
--- a/debian/patches/0011-fix-privacy-breach.patch
+++ b/debian/patches/0011-fix-privacy-breach.patch
@@ -5,6 +5,9 @@ Description: Avoid privacy breach
  information in the local copy of the docs.  The tradeoff enhanced privacy
  is probably worth it since most probably will read up to date docs
  online anyway.
+ .
+ This patch does not solve all issues.  The remaining ones are discussed
+ in debian/README.source.
 
 --- a/snakemake/gui.html
 +++ b/snakemake/gui.html

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/snakemake.git