[Pkg-javascript-devel] Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[Axel Beckert]

Package: nodejs-dev
Version: 4.7.2~dfsg-1
Severity: wishlist
Affects: npm npm2deb node-gyp libssl-dev

Dear NodeJS Maintainers,

since the upload of 4.7.2~dfsg-1¸ npm is no more co-installable with
libssl-dev which is rather annoying.

Full dependency chain causing this issue:

* npm depends upon node-gyp
* node-gyp depends upon nodejs-dev
* nodejs-dev depends upon libssl1.0-dev
* libssl1.0-dev conflicts with libssl-dev

It would be nice if that chain could be broken somewhere as any
non-development package pulling in a non-default development package
which conflicts with a default development package is very annoying.

Maybe a solution similar to the one for apache2-dev can found:

> apache2 (2.4.23-8) unstable; urgency=medium
>
>   * Move the mod_ssl_openssl.h header and the dependency on libssl-dev to a
>     new package apache2-ssl-dev.  Packages that interface with openssl
>     state from mod_ssl must build-depend on this new package.
>     This will help to disentangle the build-deps in the openssl transition.
>     Closes: #845033
>
>  -- Stefan Fritsch <sf at debian.org>  Sun, 20 Nov 2016 00:33:13 +0100

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (500, 'unstable-debug'), (500, 'buildd-unstable'), (110, 'experimental'), (1, 'experimental-debug'), (1, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages nodejs-dev depends on:
ii  libssl1.0-dev  1.0.2j-5
ii  libuv1-dev     1.9.1-3
ii  nodejs         4.7.2~dfsg-1
ii  python         2.7.13-1

nodejs-dev recommends no packages.

Versions of packages nodejs-dev suggests:
ii  debhelper  10.2.3

-- no debconf information