[Pkg-javascript-devel] Bug#1017707: RM: rainloop -- RoQA; "unmaintained" upstream, security issues, upstream-fork exists (but not yet packaged in Debian)

[Salvatore Bonaccorso]

Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: carnil at debian.org, anarcat at debian.org, team at security.debian.org, pkg-javascript-devel at lists.alioth.debian.org, yadd at debian.org

Hi

As it was mentioned in #debian-security:  rainloop seems to have now a
unmaintained upstream and has security issues. There would be a fork
(snappymail) but which is not yet packaged in Debian (Cf. #1017641).

,---- [ dak rm --suite=unstable -n -R rainloop ]
| Will remove the following packages from unstable:
|
|   rainloop | 1.16.0+dfsg-1 | source, all
|
| Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
|
| ------------------- Reason -------------------
|
| ----------------------------------------------
|
| Checking reverse dependencies...
| No dependency problem found.
`----

There are no conflicts in removing it, but I'm adding both Antoine and
Xavier to recipients to comment on.

Regards,
Salvatore