[DRE-maint] Bug#857990: Bug#857986: npm: This pakcage is 3 years old? (consider removal)

[Adrian Bunk]

Control: severity -1 grave
Contraol: tags -1 stretch sid

On Fri, Mar 17, 2017 at 12:50:11AM +0100, Jérémy Lal wrote:
>...
> I should have done this long before, but npm should not stay in testing:
> - `npm install thisorthatmodule` is failing for a growing list of modules
> - npmjs.org might drop support for this old client at anytime now
> - it's not supportable (security-wise) and i'd advise against using it
> 
> I'll use block this bug by the handful of packages depending on npm.

I'm raising the severity of these bugs accordingly.

Note that a missing dependency is also RC, so something like
  npm2deb: Please Recommend npm instead of Depend
does not sound like an option.

Removing npm from stretch implies that packages that are non-functional 
without npm also have to be removed from stretch.

> Jérémy

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed