[Pkg-javascript-devel] Bug#975362: src:node-rollup-plugin-json: contains source-less wasm code

Jonas Smedegaard dr at jones.dk
Fri Nov 20 18:33:41 GMT 2020


Package: src:node-rollup-plugin-json
Version: 4.1.0+~4.0.0-2
Severity: serious
Justification: Policy 2.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

source contains compiled webassembly code from project wabt.

A corresponding lintian override has the comment "Unused files",
but that's not ok: Used or not, all code must include source.

-----BEGIN PGP SIGNATURE-----
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=deJF
-----END PGP SIGNATURE-----



More information about the Pkg-javascript-devel mailing list