[Pkg-javascript-devel] Bug#870460: anyone working on npm?

[Pirate Praveen]

On Tue, 23 Jan 2018 23:14:32 -0800 Diane Trout <diane at ghic.org> wrote:
> Hello,
> 
> I was looking to update zotero, which needs a newer npm.
> 
> I was curious, so I tried building a npm using upstream's 5.6.0, and I
> have something that almost installs & runs.

Great!

> Several dependencies are out of date in Debian, and there's still a
> fair number of node_modules that don't seem to have a corresponding
> Debian package.
> 
> Would it be worth sharing these changes? How would you prefer to
> receive / review them? There's a few issues I avoided that need some
> discussion. (Like they embed a copy of node-gyp, and several scripts
> hard code relative paths to that copy)

We should package the remaining modules (we have to package about 38
more modules https://pad.disroot.org/p/npm-list ). You can just file
ITPs of missing modules and package them.

We keep this https://wiki.debian.org/Javascript/Nodejs/Tasks/npm
refreshed often.

Also we should try to replace embedded copies with packaged versions.

> I wanted to get in touch with people in the javascript team before
> slogging through updating the copyright file.

Welcome to the team!

We can take a bit of shortcut if the module is too small and unlikely to
be required by other tools by embedding it.
https://salsa.debian.org/js-team/node-react/tree/master/debian/node_modules/ncp

We can always unbundle them if more packages starts depending on them
(like we did with node-asap).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 862 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20180124/4217db5a/attachment.sig>