[Pkg-javascript-devel] Bug#1153788: node-clone-deep: drop unused node-for-own build dependency
刘子曦
alexanderseabra123 at gmail.com
Thu Nov 12 01:47:55 GMT 2026
Source: node-clone-deep
Version: 4.0.1+~cs7.0.2-1
Severity: minor
Tags: patch
Dear Maintainer,
Please consider removing node-for-own <!nocheck> from Build-Depends.
index.js uses shallow-clone, kind-of and is-plain-object and implements its
own object loop. Neither the current implementation nor the Mocha tests
imports for-own.
I tested the original source and a version with only this Build-Depends
entry removed in two independent clean local Debian sid Docker containers
(amd64), using the same freshly updated signed APT indexes and the same
128-package base. Build dependencies were installed from each variant's
control file; no tests were disabled and no dependencies were added by hand.
Both builds succeeded, with 13 tests passing in each build. The patched
build did not have node-for-own installed. Installed package counts were
272 and 270; the omitted packages were node-for-in, node-for-own. No new
packages
appeared and the versions/architectures of common packages were unchanged.
The generated node-clone-deep_4.0.1+~cs7.0.2-1_all.deb files were
byte-for-byte identical:
SHA256 b6bb26b0dc4a180f150fdb31c48e39a3934b1bb11a0940b53bee17b7ac73f520
The patch changes only Build-Depends; binary Depends are unchanged. This
validation covers the default profiles on amd64, one build per variant;
I did not run a separate autopkgtest or test other architectures.
I checked the current and archived source-package BTS reports and open
Salsa merge requests on 2026-11-12 and did not find a duplicate.
Attached are the patch, both complete build logs and a verification summary.
Regards,
Zixi Liu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20261112/3d578f5e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: remove-unused-node-for-own-build-dependency.patch
Type: application/octet-stream
Size: 280 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20261112/3d578f5e/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: baseline-build.log
Type: application/octet-stream
Size: 4354 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20261112/3d578f5e/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patched-build.log
Type: application/octet-stream
Size: 4354 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20261112/3d578f5e/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: verification.json
Type: application/json
Size: 1086 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20261112/3d578f5e/attachment.json>
More information about the Pkg-javascript-devel
mailing list