[pkg-php-pear] composer and debian

[David Prévot]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

I followed your lead and just uploaded php-symfony-routing (a slightly
outdated version as a PoC to be used in ownCloud instead of the current
embedded copy).

   http://anonscm.debian.org/gitweb/?p=pkg-php/php-symfony-routing.git

Le 26/06/2013 14:54, andrea rota a écrit :
> On Wed, Jun 26, 2013 at 11:00:48AM +0200, Mathieu Parent wrote:

>> - control's Vcs-* fields should point to the packaging repo (and not
>> the upstream repo)
> 
> ok, this is done

Vcs-Browser should be:
   http://anonscm.debian.org/gitweb/?p=pkg-php/php-symfony-process.git

>> - Have you run lintian on it? It seems long desc is probably too
>> short. You should explain what symfoy is here.
> 
> thanks - i have expanded this a bit

I’ve used something slightly different for the common part, aiming to be
understandable not only by specialists (they already know what they want):

   Description: Symfony framework - Routing component
    Symfony is a PHP framework, a set of tools and a development
    methodology.

I’m open to suggestions and other improvements: it would be nice if we
could agree on something (debian-l10n-english could help us provide a
fine wording).

>> - the tests should probably be installed
> 
> you're right - there's no reason why they shouldn't be there

Actually, I disagree here: tests may not be “secured”, and mostly aimed
to be used to verify the program (e.g. at build time) in “extreme”
conditions. Keeping tests in the executable path often opens a security
issue. So I would rather encourage you to not ship them unless a real
security audit has been performed on this code.

Furthermore among other details, I used an upstream URL for Homepage
instead of the github source one, used something more human-readable as
Upstream-Name, kept the same license as upstream for the packaging, and
included a watch file,

Regards

David

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJRy2grAAoJEAWMHPlE9r08tCAH/j1tbgmoVHQ4rtK9/fWRlSPD
pKXneD6OfHW0n3Fb7fZinAo6wdgddDTs+ImFaeu4KzgBHb4UmskYUUc8gIjqOXmi
hiGnppoW/xCN0WzH7+ecGvckTXRFVDynDHu/zb+DVYa7bWd0nK97FvW/bkWmHVMO
A4/ia2Qc14vjYVqGvOMmdZl7FKowjEAEUQnvGOKvx+BZjIoIlElEqZRVBmVfbVEV
E3/y5iUwEHx9bR1tS3OAK7VBRCAZUNSO9ywxny/Retf6AGk/Pumhy+TD6/SP55wV
G2c2uivA2O1POG2KW3DsyWJ/UuUv8Dk9YIUWF9Ja7RPH2MZN327Ko+UMs96JdPY=
=y4gB
-----END PGP SIGNATURE-----