[Pkg-javascript-devel] New lintian warnings helping to detect FTBFS and license violation

Bastien ROUCARIÈS roucaries.bastien at gmail.com
Sat Jun 2 08:41:12 BST 2018


Hi,

Newest lintian will detect a few new problems in our package.

It will first detect minified javascript/css embedded in html file (source only). It it possible to avoid this warning by creating a symlink
 to source or adding source under debian/missing-source/$nameoffile.fragment (better naming welcome).

It will also detect html file that include script with a copyright statement. These scripts were likely copy-pasted and likely needs to be rebuilt from the original source.  
Moreover they may be also outdated and may need need to be updated from a security point of view. [1] They are a few false positive that will fixed ASAP.

Last but not least, lintian will detect browserify/webpack source both in html  included script and js file [2]. These file should be rebuilt from source
(I am now packaging browserify to main. Technically they are also some problem with browserified file that need to be rebuilt each time a depends change).

Bastien

[1] https://lintian.debian.org/tags/embedded-script-includes-copyright-statement.html
[2] https://lintian.debian.org/tags/source-contains-browserified-javascript.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20180602/84133f84/attachment.sig>


More information about the Pkg-javascript-devel mailing list