[Pkg-javascript-devel] Bug#873016: Bug#873016: node-lodash-packages: not preferred form for source: Should be built from node-lodash

[Jonas Smedegaard]

Quoting Ivo De Decker (2019-01-12 17:18:02)
> On Wed, Aug 23, 2017 at 11:41:28PM +0530, Pirate Praveen wrote:
> > On ബുധന്‍ 23 ആഗസ്റ്റ് 2017 11:33 വൈകു, Jonas Smedegaard wrote:
> > > Package: node-lodash-packages
> > > Severity: serious
> > > Justification: Policy 2.1
> > 
> > I do not think the root issue is serious, but only important.
> > 
> > > The source package node-lodash-packages does not contain the 
> > > source form preferred for editing by upstream.  Instead, upstream 
> > > documents how the contents of that code is generated from the 
> > > sources included in Debian in the source package node-lodash.
> > 
> > Adding a build dependency on node-lodash would be enough for the 
> > policy requirement.
> 
> No it wouldn't. You need to actually generate the code instead of 
> shipping the pregenerated code from upstream. Not doing that is a 
> serious bug. If you think this is easy to fix, please do so. If not, 
> this package should be removed from testing.

Relevant part of Debian Policy §2.1:

  The program must include source code

Build-depending on another package while using prebuilt code is 
argually permitted (but then discourage in other sections, with less 
strong words than "must"), but only if ensuring that in fact the 
distributed code was once built from this exact version of code in the 
build-depended on package.

I find it disgusting that you try find loopholes in policy, Praveen, 
instead of following the spirit of Debian Policy which is to distribute 
source, and build only from that distributed source (avoid distributing 
pre-built/pre-miified/pre-whatever code).

Please fix this properly!


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20190112/54d24b5e/attachment.sig>