[Pkg-javascript-devel] JavaScript policy?

[Jonas Smedegaard]

Quoting François-Régis (2014-03-25 01:07:20)
> Le 22/03/2014 12:37, David Prévot a écrit :
>> Le 22/03/2014 05:33, Emilien Klein a écrit :
>>> On 03/21/2014 11:22 PM, François-Régis wrote:
>>>> Le 21/03/2014 07:45, Emilien Klein a écrit :
>>>> We may have something like :
>>>>
>>>> * Origin tarball should not include any minify code.
>>
>> Maybe there is a missing “sourceless” here: it’s perfectly fine for a
>> source package to embed a convenient binary/prebuilt copy, as long as it
>> is not used in the binary package, but instead rebuild it from source
>> and ships the rebuilt version. In order not to make minified JavaScript
>> any different, the first point should read:
>>
>> * Origin tarball should not include any sourceless minified code.

I find that a sensible change to our Policy.  But that does *not* mean 
that a non-minified Javascript file and a minified one in same tarball 
can blindly be assumed to be code-identical: You would still need to 
actually prove that somehow - e.g. by (re-)minifying both!


> This is exactly not what Marcelo said in [0] and its reference to [1]
> shows that he removes minifies files from origin tarball althought they
> have source files.
> 
> [0]
> http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/2014-March/007176.html
> 
> [1]
> http://anonscm.debian.org/gitweb/?p=pkg-javascript/flot.git;a=blob;f=debian/rules;h=83670cf0ec4aaec4817d6f2eb68d0756d85ac553;hb=HEAD

I don't understand what point you are trying to make: Even with above 
change to our Policy, it is still very valid to continue to repackage 
tarballs stripping suspect code instead of the more tedious task of 
proving that they are indeed acceptable for us to redistribute.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 966 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20140325/1a7ffc76/attachment.sig>