[Pkg-javascript-devel] Bug#943389: Bug#943389: node-lodash: source package does not contain upstream source

Pirate Praveen praveen at onenetbeyond.org
Thu Oct 24 14:43:53 BST 2019



On Thu, Oct 24, 2019 at 11:40, Jonas Smedegaard <dr at jones.dk> wrote:
> Package: node-lodash
> Version: 4.17.15+dfsg-1
> Severity: serious
> Justification: Policy 2.1
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> The source package src:node-lodash states in its debian/copyright file
> that its upstream source is <https://github.com/lodash/lodash>

What I found relevant here is
If running dpkg-source -x on a source package doesn’t produce the 
source of the package, ready for editing, and allow one to make changes 
and run dpkg-buildpackage to produce a modified package without taking 
any additional steps, creating a debian/README.source documentation 
file is recommended.

https://www.debian.org/doc/debian-policy/ch-source.html#source-package-handling-debian-readme-source

I don't think even this requirement is not applicable here, as apt 
source does the required things and uscan does the right thing when 
updating to new upstream release.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20191024/8091eb69/attachment.html>


More information about the Pkg-javascript-devel mailing list