Ben Finney <ben+deb...@benfinney.id.au> wrote:

Hi,

> As far as I can understand, this is entirely compatible with “absence of
> ‘debian/source/format’ always means the package is in “1.0” source

The problem is that if debian/source/format is missing for one reason or
another, your package will be silently built as a 1.0 source
package. From there on, in the best case it fails right away but it can
also lead to silently building packages without applying patches.

Now, let's say there's a security patch in the pile, and this becomes a
problem.

JB.

-- 
 Julien BLACHE - Debian & GNU/Linux Developer - <jbla...@debian.org> 
 
 Public key available on <http://www.jblache.org> - KeyID: F5D6 5169 
 GPG Fingerprint : 935A 79F1 C8B3 3521 FD62 7CC7 CD61 4FD7 F5D6 5169 


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87zl1spzmf....@sonic.technologeek.org

Reply via email to