Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Vincent Bernat
❦ 6 octobre 2016 20:47 CEST, Adrian Bunk  : >> > If you fancy explaining what you think browserified means w.r.t. the >> > Jison stuff, go ahead of course. That might at least help to focus the >> > discussion a bit. Just don't feel obliged to because I said so. >> >> The libjs-handlebars iss

Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 09:48:02AM +0200, Vincent Bernat wrote: > ❦ 5 octobre 2016 22:49 CEST, Philip Hands  : > > > If you fancy explaining what you think browserified means w.r.t. the > > Jison stuff, go ahead of course. That might at least help to focus the > > discussion a bit. Just don't

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Tollef Fog Heen
]] Adrian Bunk > Where you placed the dots policy says: > > Every package in _contrib_ must comply with the DFSG. Yes, so you put the source in the source package. Job done. I haven't checked the licenses of the various packages, but AIUI, that's not the problem. The problem is that pac

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 07:48:28PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk > > > On Thu, Oct 06, 2016 at 07:26:06PM +0200, Tollef Fog Heen wrote: > > >... > > > I think it'd be preferable for the software to be in contrib (AFAIK > > > there's nothing here which is non-free?) > > >... > >

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Tollef Fog Heen
]] Adrian Bunk > On Thu, Oct 06, 2016 at 07:26:06PM +0200, Tollef Fog Heen wrote: > >... > > I think it'd be preferable for the software to be in contrib (AFAIK > > there's nothing here which is non-free?) > >... > > When a package is not DFSG-free it is non-free. > > Only DFSG-free packages th

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 07:26:06PM +0200, Tollef Fog Heen wrote: >... > I think it'd be preferable for the software to be in contrib (AFAIK > there's nothing here which is non-free?) >... When a package is not DFSG-free it is non-free. Only DFSG-free packages that depend on non-free software are

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Tollef Fog Heen
]] "Joseph R. Justice" > I'll be honest, I assumed from what I've read that a decision had > already been made by the FTP team against Mr. Praveen. I figured that > it must have been, or else why would he be raising this bug with the > TC now? It's not clear that it has, which is one of the reas

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Tollef Fog Heen
]] Joseph R. Justice > Is there any information yet on what formal policy (if any) will be > used by the release managers for allowing bugs to be tagged > stretch-ignore? *Was* there any formal policy ever set in place for > the prior (the current stable) release of Debian, e.g. Jessie, or > prior

Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 02:23:37PM +0200, Didier 'OdyX' Raboud wrote: >... > All of the above are imperfections (yes, bugs) in how src:firefox handles its > internal sqlite3.c code copy. In an ideal world: > > * src:sqlite3 would provide sqlite3.c in a binary package (sqlite3-static ?) > * src:fi

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 11:48:36AM +0200, Philip Hands wrote: >... > The security team are going to have to track down every instance of that > code and fix it. If the bug is something to do with an interaction > between the code and the tools used to "browserifiy" the code, that may be > non-triv

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Didier 'OdyX' Raboud
Le jeudi, 6 octobre 2016, 14.38:21 h CEST Adrian Bunk a écrit : > I am not sure whether this has been filed as a bug in any affected > package, but src:sqlite3 is not affected. > > The problem is the amalgamation in other packages, for example: > https://sources.debian.net/src/firefox/49.0-4/db/s

Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 10:43:00AM +0100, Ian Jackson wrote: > Adrian Bunk writes ("Re: Bug#839570: Browserified javascript and DFSG 2 > (reopening)"): > > Perl's Configure or SQLite are other examples of code with similar > > issues currently in Debian, and it would be helpful if the TC would >

Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Adrian Bunk
On Thu, Oct 06, 2016 at 01:13:16AM -0400, Joseph R. Justice wrote: > For the record, I wish the message I am now responding to, and other > subsequent responses and discussion, were being sent to the bug mail > address *in addition to* all the other addresses they're being sent to. >... For the re

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Ian Jackson
Philip Hands writes ("Bug#839570: Browserified javascript and DFSG 2 (reopening)"): > I'm just writing as an individual here BTW, but I'll obviously carry > these views into any discussion that the TC might have about this. Phil, thanks for that excellent contribution. Thanks also to Joseph for

Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Philip Hands
"Joseph R. Justice" writes: >> Here are some factors to consider: >> >> 1) It's not clear to several TC members that the FTP team has decided >> on this question. It seems fairly clear how they would decide if they >> did decide, but from a process standpoint, it's important to have a >> formal

Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Ian Jackson
Adrian Bunk writes ("Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)"): > Perl's Configure or SQLite are other examples of code with similar > issues currently in Debian, and it would be helpful if the TC would > start by gathering an overview of the different cases and how they >

Re: Bug#839570: Browserified javascript and DFSG 2 (reopening)

2016-10-06 Thread Vincent Bernat
❦ 5 octobre 2016 22:49 CEST, Philip Hands  : > If you fancy explaining what you think browserified means w.r.t. the > Jison stuff, go ahead of course. That might at least help to focus the > discussion a bit. Just don't feel obliged to because I said so. The libjs-handlebars issue has little