[Pkg-javascript-devel] Bug#768754: backbone: FTBFS in jessie: build-dependency not installable: phantomjs

intrigeri intrigeri at debian.org
Sat Nov 15 15:38:18 UTC 2014


Hi wordpress maintainers,

Andrey Rahmatullin wrote (12 Nov 2014 18:20:30 GMT) :
> On Sun, Nov 09, 2014 at 06:10:57PM +0100, Felix Gruber wrote:
>> phantomjs is currently not in jessie due to two RC bugs (#679759 and
>> #699435).
> ... and thus it won't be in jessie at all.

wordpress build-depends on libjs-backbone (built by the backbone
source package) which itself build-depends on phantomjs.

phantomjs was removed from testing more that two years ago. It has 

  * an open security issue (CVE-2013-4549)
  * FTBFS on kfreebsd (#679759, which isn't RC anymore)
  * so many embedded code copies (#699435) that the security team
    doesn't want to see it in a stable release "as long as it's using
    a copy of QT"

I don't see how we can fix this situation in time for Jessie.

How important is wordpress' build-dependency on libjs-backbone?
Can it be removed?

Cheers,
--
intrigeri



More information about the Pkg-javascript-devel mailing list