Package: prometheus Version: 1.2.3+ds2-5 Severity: serious X-Debbugs-CC: pkg-go-maintain...@lists.alioth.debian.org
Dear maintainers, Prometheus depends on many libraries, including source codes located into vendor directory. Is this a violation for Debian Policy 4.13 ? "4.13 Convenience copies of code" https://www.debian.org/doc/debian-policy/ch-source.html#s-embeddedfiles Some libraries of vendor/* had already packaged in Debian, (ex: golang-github-hashicorp-go-cleanhttp-dev, golang-github-hashicorp-consul-dev) Can't we use these instead of vendoring method ? Regards, -- Haruki TSURUMOTO PGP Fingerprint:3718 C84E 4EDA 1B5C 4F26 8639 9D3D EE3F 63A6 000E
