Alexandre Detiste, le mer. 28 août 2024 22:13:33 +0200, a ecrit: > Le mer. 28 août 2024 à 21:02, Samuel Thibault <sthiba...@debian.org> a écrit : > > What problem does it actually pose? :) > > I think this one package is at minimal threat, but at the distro-level; > depending on old libraries (some unmaintained) is a risk, > there are stil 300 packages needing six.
300 is a lot, that's why I'm wondering why targetting six? > Some things could break in half expected ways ... again. > > We had this dependency chain before: > pytest -> requests -> urllib3(v1) -> six. I doubt otf2 would be in a problematic dependency chain. > I can provide a patch on basis of last tarball but that feels 1999 Not all free software is developed in the open. They probably use git internally, but don't expose it, that's their choice. Quilt is still there to easily manage patches in such a case. > > As debian/control and copyright document, upstream is at > > https://www.vi-hps.org/projects/score-p > This one does not contains otf2 It does. Samuel