[Pkg-javascript-devel] Bug#975362: Bug#975362: src:node-rollup-plugin-json: contains source-less wasm code

[Xavier]

Le 20/11/2020 à 19:33, Jonas Smedegaard a écrit :
> Package: src:node-rollup-plugin-json
> Version: 4.1.0+~4.0.0-2
> Severity: serious
> Justification: Policy 2.1
>
> source contains compiled webassembly code from project wabt.
> 
> A corresponding lintian override has the comment "Unused files",
> but that's not ok: Used or not, all code must include source.

Fixed, thanks. However you should also open a bug against lintian: if
you consider that having unused wasm files in source is a RC bug, then
lintian should not consider this as "pedantic".

Ref:
 P source-contains-prebuilt-wasm-binary

 The source tarball contains a prebuilt binary wasm object. They are
 usually provided for the convenience of users. These files usually just
 take up space in the tarball and need to be rebuilt from source.

 Check if upstream also provides source-only tarballs that you can use
 as the upstream distribution instead. If not, you may want to ask
 upstream to provide source-only tarballs.

List of packages that have wasm files in their sources:
https://lintian.debian.org/tags/source-contains-prebuilt-wasm-binary.html