[Pkg-javascript-devel] Bug#976331: Bug#976331: Bug#976331: node-compression-webpack-plugin, node-copy-webpack-plugin, node-uglifyjs-webpack-plugin: contains hidden embedded nodejs module serialize-javascript

[Xavier]

Le 03/12/2020 à 14:24, Xavier a écrit :
> Le 03/12/2020 à 12:44, Jonas Smedegaard a écrit :
>> Package:
> node-compression-webpack-plugin,node-copy-webpack-plugin,node-uglifyjs-webpack-plugin
>> Severity: important
>>
>> These source packages embed nodejs module serialize-javascript
>> without offering it as virtual binary package:
>>
>>  node-compression-webpack-plugin
>>  node-copy-webpack-plugin
>>  node-uglifyjs-webpack-plugin
>>
>> Please embed in only one source package provided as versioned virtual package,
>> and drop in other source packages instead depending on the virtual package.
>>
>> Severity raised since the lack of virtual package blocks upgrading node-terser.
>>
>>  - Jonas
> 
> Hi,
> 
> for now, dh-sequence-nodejs adds a "Provides" item for modules installed
> in root nodejs directories. Do we want to declare a "node-foo" for
> submodules (installed in a <package>/node_modules directory) ?
> 
> Cheers,
> Xavier

Note that the future lintian database (classification tags) will permit
to see node modules everywhere.