[pkg-php-pear] Bug#977150: No package should (build-)depend on composer

[David Prévot]

Package: lintian
Version: 2.104.0
Severity: normal
X-Debbugs-Cc: pkg-php-pear at lists.alioth.debian.org

Hi,

It would be nice to warn maintainers if their package (build-)depend on
composer: it’s most likely an error. Composer is a PHP tool to install
PHP packages (like pip for Python, or npm for Node.js), and should not
be pulled as a (build-)dependency: we have other ways to deal with
composer packages like dh_phpcomposer(1) (from pkg-php-tools) and
phpab(1) to generate a static autoloader.

Since not all PHP related packages are maintained under the usual PHP
PEAR (and Composer) Maintainers umbrella, it should help maintainers not
aware of the usual conventions to do the right thing® (and eventually
maintain their package with the dedicated team).

Regards

David

P.-S.: I do maintain a package build-depending on composer, as used
during the testsuite, hence the proposal to make this a warning rather
than an error.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20201211/0569213f/attachment-0001.sig>