Hi,

> In the meantime, I note that Sandro Tosi has dropped his
> maintainership of the package, but pushed a debian/4.0.5-2 tag without
> uploading. Do you know the status of that?

I have had no answer from both listed maintainers since last January. I
have tried to contact them through salsa comment, bug reports and direct
e-mail.

> The two top bugs are a missing -latomic on ARM, which should be easy
> enough to work around in debian/rules using
>   include /usr/share/dpkg/architecture.mk
>   if ...

Maybe this fix should be upstreamed with something looking like a
similar change:
https://patch-diff.githubusercontent.com/raw/ccache/ccache/pull/723.patch

> and the prebuilt javascript business, which I note from MR/16 you've
> been working on. One suggestion I have for that is to set things up so
> that *if* the tools are available, the javascript can be rebuilt; but
> if not, pre-built versions are used anyway. This would make things
> robust, and would I think allow the bug to be downgraded.

I fail to understand how using prebuild versions would fix the bug or
how handling the case where the tools are not available would help.
Would you elaborate on the use case?

> I'm also not thrilled with how the build process adds a git hook if it
> can. Should probably hot-wire that off, because it seems to present a
> potential security issue. Just a quilt patch to disable the entire
> if(GIT_FOUND) thing at the end of CMakeLists.txt seems about right.
> (The Source Control System is supposed to control the build, not vice
> versa!)

I completely agree but as we are in the context of a NMU, I wanted to
keep focused.

To sum things up, I understand that my upload needs an update for the
missing -latomic issue. I'll prepare an update.

Thanks for your interest,

Alex

Reply via email to