[Pkg-javascript-devel] Bug#980032: RM: node-request/2.88.1-5

[Jonas Smedegaard]

Quoting Pirate Praveen (2021-01-13 13:42:22)
> 
> 
> On Wed, Jan 13, 2021 at 12:22 pm, Xavier <yadd at debian.org> wrote:
> > CC to pkg-javascript-devel for node-yarnpkg elements
> 
> 
> We can try to update yarnpkg to version 2 by building corepack [1].
> 
> I need help with these packages,
> 
> New modules: clipanion terser-webpack-plugin  ts-loader 
> @zkochan/cmd-shim
> 
> Update terser to 4.8 at least

Draft of node-terser 4.8.0 is now pushed to Salsa - help making it work 
is quite welcome, just please do *not* introduce pkg-js-tools.


> I'm currently trying to update node-babel7 in buster-backports and it 
> can take some more time before I can get to these.
> 
> We can embed a copy of request in yarnpkg as a last resort.

Do *not* embed for the reason of hiding obsoletion!

If node-request cannot be removed then do not remove it!

Instead, place it in package section oldlibs, change package description 
to clarify its deprecated state and strongly warn against relying on it, 
and file RC bugreports against any package that rely on it anyway.

Then each such RC bug can be treated individually.  Either lowered to 
non-RC, or better: keep it RC and request an exception from release 
managers.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20210113/9f138b8f/attachment.sig>