[Pkg-javascript-devel] Bug#995722: Bug#995722: Bug#995722: Bug#995722: loash: Vendoring should be removed

Yadd yadd at debian.org
Wed Oct 6 14:15:18 BST 2021


Le 06/10/2021 à 12:17, Yadd a écrit :
> Le 06/10/2021 à 12:16, Jonas Smedegaard a écrit :
>> Quoting Yadd (2021-10-06 11:43:40)
>>> On Lu, 04 oct 21, 16:40:48, Bastien Roucari�s wrote:
>>>> Source: src:node-lodash
>>>> Version: 4.17.21+dfsg+~cs8.31.173-1
>>>> Severity: serious
>>>> Justification: do not compile from source
>>>>
>>>> Dear Maintainer,
>>>>
>>>> The vendor directory should be emptied
>>>>
>>>> The debug version is compiled without source (lintian warn) and moreover the
>>>> rest of file are already packaged
>>>>
>>>> grep -R vendor * gives only a few hit that could be cured by symlinking
>>>>
>>>> Bastien
>>> Hi,
>>>
>>> this files are used for test only, maybe severity could be decreased.
>>
>> I find the severity accurate: Relying on non-source code is a severe 
>> violation of Debian Policy, not matter the purpose of relying on it.
>>
>>
>>  - Jonas
> 
> So let's remove test...

Sadly (Hopefully) test aren't enabled in node-lodash...



More information about the Pkg-javascript-devel mailing list