[Pkg-javascript-devel] Bug#996427: Bug#996427: node-mermaid: ships a copy of /usr/share/nodejs/crypto-random-string/*, already in node-crypto-random-string

[Nilesh Patra]

On 10/14/21 3:06 AM, Andreas Beckmann wrote:
> Package: node-mermaid
> [...]
Hi,

I think it'd be sensible to unvendor crypto-random-string here. However, after trying to un-vendor -- patch attached with email,
The checksum reduces as expected to 26.13.21 -- which is less than the one in the archive

$ dpkg --compare-versions 8.13.2+ds+~cs26.13.21 lt 8.13.2+ds+~cs30.13.21 && echo true
true

So, what should be done then?
@Yadd, team, ideas?

Nilesh
-------------- next part --------------
diff --git a/debian/control b/debian/control
index 54e6dd3..a8116d7 100644
--- a/debian/control
+++ b/debian/control
@@ -19,6 +19,7 @@ Build-Depends:
  , rollup
  , uglifyjs.terser
  , webpack (>= 4.43.0~)
+ , node-crypto-random-string
 Standards-Version: 4.6.0
 Vcs-Browser: https://salsa.debian.org/js-team/node-mermaid
 Vcs-Git: https://salsa.debian.org/js-team/node-mermaid.git
diff --git a/debian/gbp.conf b/debian/gbp.conf
index 4e777c0..e686aad 100644
--- a/debian/gbp.conf
+++ b/debian/gbp.conf
@@ -1,4 +1,4 @@
 [DEFAULT]
 pristine-tar=True
 filter=[ '.gitignore', '.travis.yml', '.git*' ]
-component=['sanitize-url', 'webpack-node-externals', 'scope-css', 'crypto-random-string', 'slugify', 'escaper', 'strip-css-comments', 'is-regexp', 'khroma', 'stylis', 'entity-decode']
+component=['sanitize-url', 'webpack-node-externals', 'scope-css', 'slugify', 'escaper', 'strip-css-comments', 'is-regexp', 'khroma', 'stylis', 'entity-decode']
diff --git a/debian/watch b/debian/watch
index ed13b14..50f26a3 100644
--- a/debian/watch
+++ b/debian/watch
@@ -23,12 +23,6 @@ opts="searchmode=plain,component=webpack-node-externals,pgpmode=none" \
 opts="searchmode=plain,component=scope-css,pgpmode=none" \
  https://registry.npmjs.org/scope-css https://registry.npmjs.org/scope-css/-/scope-css-([\d\.]+)@ARCHIVE_EXT@ checksum
 
-opts=\
-component=crypto-random-string,\
-dversionmangle=auto,\
-filenamemangle=s/.*\/v?([\d\.-]+)\.tar\.gz/node-crypto-random-string-$1.tar.gz/ \
- https://github.com/sindresorhus/crypto-random-string/tags .*/archive/.*/v?([\d\.]+).tar.gz checksum
-
 opts=\
 component=slugify,\
 dversionmangle=auto,\
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20211015/4787efd7/attachment.sig>