[Pkg-bazaar-maint] Pushed loggerhead changes (1.18-1), requesting sponsored upload

[Roland Mas]

Max Bowsher, 2010-11-18 10:40:09 +0000 :

[...]

> The problem is, I don't currently have the background knowledge of
> Javascript packaging, nor the time currently to dig into learning it,
> nor the ongoing involvement to be a responsible provider of updates for
> it outside the context of what loggerhead upstream does.

  Which is why I suggested getting in touch with the Javascript
maintainance team.  They could provide the knowledge, or the package
itself, or the maintenance, or whatever.

> Why can't we embed the dependency until such time as someone packages
> YUI 3 independently?

  Because embedding copies of libraries is widely frowned upon, and for
good reasons.  Such embedded copies are typically unmaintained over
time, and they accumulate bugs and security issues.

> The loggerhead package currently in Debian is fairly badly broken
> because all of its Javascript features are missing. I think that's a
> strictly worse situation than having no loggerhead package in Debian
> at all.

  It's a short-term problem that can easily be fixed.  Embedding a copy
of a library creates a long-term problem.

Roland.
-- 
Roland Mas

... all in all it's just another rule in the firewall.
  -- Ping Flood