Source: cjs Version: 3.2.0-3 Severity: serious Tags: sid buster mozjs24 is the SpiderMonkey JavaScript engine from Firefox ESR 24. Firefox ESR 24 has not been supported by Mozilla for 3 years. We should not ship Debian 10 "Buster" with mozjs24.
There are only 2 rdepends for mozjs24 in Debian: cjs and edbrowse. edbrowse is already ported upstream but there is a packaging issue. See https://bugs.debian.org/875706 That means that cjs is basically the only reason mozjs24 is still in Debian. A replacement for mozjs24, mozjs52 is now in Debian. cjs upstream has not been ported to mozjs52 yet, but it has been ported to mozjs38. mozjs38 is not in Debian but perhaps you could apply the debian/copyright from mozjs52 to the WIP mozjs38 branch to get it through the Debian NEW queue. https://anonscm.debian.org/git/pkg-gnome/mozjs38.git https://anonscm.debian.org/git/pkg-gnome/mozjs52.git However, mozjs38 hasn't been supported by Mozilla since June 2016 so that's not ideal either. Thanks, Jeremy Bicha
