[Pkg-javascript-devel] Bug#943389: Bug#943389: node-lodash: source package does not contain upstream source
Jonas Smedegaard
dr at jones.dk
Thu Oct 24 18:29:26 BST 2019
Quoting Pirate Praveen (2019-10-24 19:12:22)
>
>
> On Thu, Oct 24, 2019 at 19:05, Jonas Smedegaard <dr at jones.dk> wrote:
> > Quoting Pirate Praveen (2019-10-24 18:42:17)
> >> On Thu, Oct 24, 2019 at 16:19, Jonas Smedegaard <dr at jones.dk
> >> <mailto:dr at jones.dk>> wrote:
> >> > Quoting Pirate Praveen (2019-10-24 15:34:15)
> >> >> All files derived from source have their corresponding source
> >> >> code and it is regenerated during build.
> >> >
> >> > It may very well be "source" but not "upstream source".
> >> >
> >>
> >> Then I fail to see how this is a serious bug.
> >
> > I listed Policy ยง 2.1 as being the reason for severity of this bug.
> >
> > Let me quote the part I find relevant:
> >
> >> The program must include source code, and must allow distribution
> >> in source code as well as compiled form.
> >
> > If this package _does_ contain source code but just from a
> > _different_ upstream project than the one currently listed in
> > debian/copyright then the bug is easily fixed by simply correcting
> > what upstream project this package claims to ship source code from.
>
> Lets ask the team what they think about the issue.
>
> Hi js-team,
>
> Do you think this is really an rc bug? Do you think Source field in
> debian/copyright should be changed to
> https://github.com/lodash/lodash/releases ?
For the record, I did not say that above URL solves this bug.
- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
[x] quote me freely [ ] ask before reusing [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20191024/28ea21e6/attachment-0001.sig>
More information about the Pkg-javascript-devel
mailing list