[Pkg-javascript-devel] Uploading Rainloop

[Daniel Ring]

On 12/8/2021 1:38 AM, Jonas Smedegaard wrote:
> If older package releases embedded the full source for Modernizr then I
> agree that it should be acceptable (even if not ideal), but if only
> bundling a generated build of Modernizr then it is a severe violation of
> Debian Copyright and must be corrected.
> 
> Debian provides a package libjs-modernizr with _some_ Modernizr build.
> 
> Since Modernizr is mostly about providing fallbacks for older browsers,
> you might consider using the generic build and documenting in the
> package README.Debian which fallbacks are skipped and will need fetching
> which custom-profile build of Modernizr for which ancient browsers.

The embedded Modernizr is source-only (though not a complete copy of the 
source, it only includes a few feature tests). The Debian version 
doesn't have any of the feature tests in the embedded version.

However, we're in luck; I checked which tests Rainloop was using and 
discovered that it doesn't use the library at all anymore, so I removed 
it. Looks like upstream just forgot to remove their vendored copy.

With that, the only bundled libraries remaining in Rainloop are 
source-only copies not already packaged in Debian.

Sincerely,
Daniel Ring