[Pkg-javascript-devel] Bug#976331: Bug#976331: node-compression-webpack-plugin, node-copy-webpack-plugin, node-uglifyjs-webpack-plugin: contains hidden embedded nodejs module serialize-javascript

[Xavier]

Le 03/12/2020 à 12:44, Jonas Smedegaard a écrit :
> Package:
node-compression-webpack-plugin,node-copy-webpack-plugin,node-uglifyjs-webpack-plugin
> Severity: important
>
> These source packages embed nodejs module serialize-javascript
> without offering it as virtual binary package:
> 
>  node-compression-webpack-plugin
>  node-copy-webpack-plugin
>  node-uglifyjs-webpack-plugin
> 
> Please embed in only one source package provided as versioned virtual package,
> and drop in other source packages instead depending on the virtual package.
> 
> Severity raised since the lack of virtual package blocks upgrading node-terser.
> 
>  - Jonas

Hi,

for now, dh-sequence-nodejs adds a "Provides" item for modules installed
in root nodejs directories. Do we want to declare a "node-foo" for
submodules (installed in a <package>/node_modules directory) ?

Cheers,
Xavier