Request for upload: supercollider 3.5.3 new version

[Felipe Sateler]

On Sun, Jun 24, 2012 at 1:10 PM, Dan S <danstowell+debmm at gmail.com> wrote:
> 2012/6/24 Felipe Sateler <fsateler at debian.org>:
>> On Sun, Jun 24, 2012 at 10:39 AM, Jonas Smedegaard <dr at jones.dk> wrote:
>>> On 12-06-24 at 11:05am, Dan S wrote:
>>>> SuperCollider 3.5.3 is now out. This comes very soon after we got
>>>> 3.5.2 into the debian repo, so no rush - but this release fixes a
>>>> couple of bugs and upstreams most of our patches (hooray). The diff
>>>> against 3.5.2 is fairly simple so I don't foresee controversy. If
>>>> anyone feels like pushing this one then please feel free.
>>>
>>> I find it very disturbing that source ships with more than 3000 files
>>> belonging to external projects.
>>>
>>> The amount alone is IMO a good reason to repackage source.
>>
>> For the record... 3.5.2 has not yet arrived to the repos, it is still
>> in the NEW queue. These extra source files are very likely to cause
>> delays in NEW processing.
>>
>>>
>>> Another reason is the difficulty tracking copyright/licensing: This is
>>> IMO not acceptable:
>>>
>>>> Files: external_libraries/boost/*
>>>> Copyright: Various authors
>>>> License: BSL-1.0
>>>
>>> A third reason is that it seems likely to miss a Boost dependency which
>>> causes the shipped copy to be used, which is a security burden if Boost
>>> is found to need patching in the future.
>>>
>>> I strongly recommend to strip that gigantic pile of external code.
>>
>> I agree. Note, however, that some of the "external" libs are actually required.
>
> I've pushed to git, a repacked source (3.5.3+dfsg) which removes the
> folder "external_libs/boost".
> I've also pushed some tweaks so that CDBS get-orig-source can
> automatically repack and do this. I hope it seems reasonable.

I've fixed a bug in it. I'm currently testing removing simplejson and
sndfile.hh.

>
> To confirm, some of the "external" libs are required, and some of them
> are actually written by a core sc developer and not published anywhere
> else (except git) so aren't really external...

And some are really external but patched. Please try to get those
patches upstreamed so that we can use the system libraries there too.

-- 

Saludos,
Felipe Sateler