On Mon, May 21, 2018 at 12:52 AM, Justin Mclean <jus...@classsoftware.com>
wrote:

> Hi,
>
> > Javascript code that is minified or combined in any major way is much
> more
> > like binary code in that respect. It is true that somebody *could*
> inspect
> > the correlation, but it is not true that this inspection is either
> normally
> > done or easily done.
>
> Thanks Ted I’ve not thought of it in that way before. I've seen several
> source releases that include minified javascript I'm just curious what
> people think about this.
>
> Do people think it OK to include minified JS in a source release if:
> 1. It's ASF developed code and the full unminified source code is included
> as well.
>

I would much rather simply provide instructions for creating the minified
version.


> 2. The minified JS is 3rd party code, is identified by version (and thus
> can be checked via a comparison with the canonical minified version)
>

Why does this need to be included at all? Why not just provide a pointer to
the canonical minified version?

Reply via email to