[Pkg-bazaar-maint] Pushed loggerhead changes (1.18-1), requesting sponsored upload
lolando at debian.org
Thu Nov 18 13:32:05 UTC 2010
Max Bowsher, 2010-11-18 10:40:09 +0000 :
> The problem is, I don't currently have the background knowledge of
> nor the ongoing involvement to be a responsible provider of updates for
> it outside the context of what loggerhead upstream does.
maintainance team. They could provide the knowledge, or the package
itself, or the maintenance, or whatever.
> Why can't we embed the dependency until such time as someone packages
> YUI 3 independently?
Because embedding copies of libraries is widely frowned upon, and for
good reasons. Such embedded copies are typically unmaintained over
time, and they accumulate bugs and security issues.
> The loggerhead package currently in Debian is fairly badly broken
> strictly worse situation than having no loggerhead package in Debian
> at all.
It's a short-term problem that can easily be fixed. Embedding a copy
of a library creates a long-term problem.
... all in all it's just another rule in the firewall.
-- Ping Flood
More information about the Pkg-bazaar-maint