Control: tags -1 moreinfo Hi,
On Mon, 10 Apr 2023 23:55:44 +0200 Markus Koschany <a...@debian.org> wrote:
This unblock is related to #1034127 and the unblock of rhino.
rhino is now unblocked.
The main reason for upgrading from 3.6.1 to 3.6.2 was to include missing Javascript files which are needed to run the web / desktop application of openrefine.
I *think* you are abusing missing-sources. Quoting policy [1]: """Sometimes upstream does not include the source code for some files in the upstream tarball. In order to satisfy the DFSG for packages in main or contrib, you should either:
repack the upstream tarball to include those sources; or
include a copy of the sources in the debian/missing-sources directory.
"""
But you are *installing* those missing sources. On top of that, you are
shipping yet another copy of e.g. jquery.js [2]. Please, if remotely
possible, use bin:libjs-jquery (and similar for the other dependencies)
instead.
Paul[1] https://www.debian.org/doc/debian-policy/ch-source.html#missing-sources-debian-missing-sources [2] https://salsa.debian.org/security-tracker-team/security-tracker/-/blob/master/data/embedded-code-copies
OpenPGP_signature
Description: OpenPGP digital signature
