[Pkg-javascript-devel] d3-format_1.0.2-2~bpo8+1_amd64.changes ACCEPTED into jessie-backports->backports-policy, jessie-backports
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 08 Mar 2017 15:23:07 +0100 Source: d3-format Binary: libjs-d3-format node-d3-format Architecture: source all Version: 1.0.2-2~bpo8+1 Distribution: jessie-backports Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Andreas Tille Description: libjs-d3-format - Formatting numbers for human consumption - browser library node-d3-format - Formatting numbers for human consumption - NodeJS module Changes: d3-format (1.0.2-2~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. * Do not enforce nodejs (>= 4.0) by the expense of accepting failed build time tests Checksums-Sha1: 42b915a9cbd2b735ef1817c95b8f90afefd75ec7 2152 d3-format_1.0.2-2~bpo8+1.dsc e2c1a2ea0e237c344ed1ef598a7a415eae8fdf53 4840 d3-format_1.0.2-2~bpo8+1.debian.tar.xz bda3e252548ed9c8c42c0dae5d3611ae1ef3c52f 13454 libjs-d3-format_1.0.2-2~bpo8+1_all.deb 2f62edc3bac6777fd024cdee8de92eafeaf1f395 3128 node-d3-format_1.0.2-2~bpo8+1_all.deb Checksums-Sha256: 698103f82b10a9660be964b0c68b9bed46d8d4b4ee47de367dc2d23318c5a1a3 2152 d3-format_1.0.2-2~bpo8+1.dsc ab92722dc34237bb5b5e7e4fc14dcf3f686baec67f9b90eaff3ff9339219b9bf 4840 d3-format_1.0.2-2~bpo8+1.debian.tar.xz 42faead9b128820eb3bf18cf05ee8ed082bd9de30803deafcf40247420afebaa 13454 libjs-d3-format_1.0.2-2~bpo8+1_all.deb e2ab385fee93beef1da08530973d87711364d6560573baf84e34dd574f42327f 3128 node-d3-format_1.0.2-2~bpo8+1_all.deb Files: 645636284833a17aa3ea6bd3dd298a62 2152 web extra d3-format_1.0.2-2~bpo8+1.dsc 1fe84cd607ecdf4f57e25540876ccb7f 4840 web extra d3-format_1.0.2-2~bpo8+1.debian.tar.xz 0be05f79f2cb5522234a01457edb3541 13454 web extra libjs-d3-format_1.0.2-2~bpo8+1_all.deb 7e9916a1f16c8e158418d0f92baf24d9 3128 web extra node-d3-format_1.0.2-2~bpo8+1_all.deb -BEGIN PGP SIGNATURE- iQJFBAEBCAAvFiEE8fAHMgoDVUHwpmPKV4oElNHGRtEFAljAFUsRHHRpbGxlQGRl Ymlhbi5vcmcACgkQV4oElNHGRtFPew/7BPb0BRNoijAaoabjXjr1NmWUrk+GXuzK hBlsdh9Rt1jwiPqikqTA2L87F5bZYZQimao6fZ+fGOnfku8NJ4L7qdHuDh3QXeb+ UQ6E35LJPNWXmwlFcrVaFRiRVEYC96Ilbyh9IEceILiPH5SSn2QvrASxPiNXs6dL jWBE5bOpY7gjBLdfVxn33sfbiDMw4YdQwYWvcXFmaWgvwf1X++9HeNwgQwEwxR4B mtMxJBcC989CgWT+qLld8DnAFMWo5YPU5nR5Rh+Fr65JazbDzq/ZGEunZjjWFBzs OFjSAdnPLtYbH7zNwA2cHd4V8lZxxRVExlwmwo0pCblZO0Iquuj1l9Cd+F8cj6gg +cvohNbSSxAkawEDSOo3qT2I/par6NOQK98vBkpP0cYkXz02VRNinBxbqryomMcv wiWg7m5K1x4gmhVw7l5a+PEZp0h2SJAIYR5ZKikQBbCK4xG2jQFbzEhtC1adqm/z j14EdonrUr3y7T9np+Tu+IWFsTld5p+kg7DMI8wf437vAirzv8vyPdA9tbiHwkHX J80w2wwPy0CW8oyp4MV83uLN5xKd94XZLAjoU7nVLTtArzZ/kFgxVbFrg5JimvE7 aA1sjYg+nfnNiVf1r7SHeRL2Dielbxnl1TZ5D/mD1n9H8dvvArH+NjqPALtpy88c AixVEB43eU8= =UxYS -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1_amd64.changes ACCEPTED into jessie-backports->backports-policy, jessie-backports
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 07 Mar 2017 10:43:55 +0100 Source: node-bootstrap-tour Binary: libjs-bootstrap-tour Architecture: source all Version: 0.11.0+dfsg-1~bpo8+1 Distribution: jessie-backports Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Andreas Tille Description: libjs-bootstrap-tour - Build product tours (JavaScript library) Changes: node-bootstrap-tour (0.11.0+dfsg-1~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. * Versioned Build-Depends: coffeescript (>= 1.10) Checksums-Sha1: 8542dec11ddfd4c7b36da092a5cdee8ea5a0a55a 2235 node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1.dsc 03527ac7fb9dab0d86e78e00e87856481756bdb1 9084 node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1.debian.tar.xz 862127aff8e6f5a739dad84a7b689c1f4acfcadc 20272 libjs-bootstrap-tour_0.11.0+dfsg-1~bpo8+1_all.deb Checksums-Sha256: 2fa325115eb4137771f95a58ef8f63d1de8c7e487713b5271824a51143116089 2235 node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1.dsc c5b878f65a8eab3c4f92bc8ae20480308e0b21afb6ab2bc319cec8b0a61b652f 9084 node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1.debian.tar.xz db952bc6ec22e93b67dc96a081b4592e39192476a24d4795e5e92ab253c35a58 20272 libjs-bootstrap-tour_0.11.0+dfsg-1~bpo8+1_all.deb Files: 394f95604cc7c4ab35a854b2423024f7 2235 web optional node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1.dsc 254b48851db371c82dff8cba04d7797d 9084 web optional node-bootstrap-tour_0.11.0+dfsg-1~bpo8+1.debian.tar.xz c28761914ddce8036c7a8018956efbff 20272 web optional libjs-bootstrap-tour_0.11.0+dfsg-1~bpo8+1_all.deb -BEGIN PGP SIGNATURE- iQJFBAEBCAAvFiEE8fAHMgoDVUHwpmPKV4oElNHGRtEFAli/JLsRHHRpbGxlQGRl Ymlhbi5vcmcACgkQV4oElNHGRtFE6Q//VuEbokNo1LLo1rMdr78PmNcSUG7BLi2E Y+Sc29Sg8FdKoJtB//BPL1OKi5FTMUb4rbcxbjbsONogv1JzIaNNp7a1T5qHodN1 XN93VsVnNeJ1G2ie3n8ccMshKwMgD+tGbz106mdtwYMu7KD3ol/4tH+b+7iTbP9W V1OvaseoKrew/jPpbuelEpy/XV8UmF7RvCSL7SNQmWJ98E3ru3IQKhqis99NEJQX VyUOTGS3Vtz3GXnIY/B7mNk/OVawE6Vei54MRjSJsmnLfjcgpn5SA3aS0WNUCUA5 BVwIkWr3Xs/T5gjB3shRudcntOyg0vWLRavC9teuHr+UQrkxEOmIJuIZWBh1851y oGYe8CGFKKtyIDG3Ispamg5Xi7VRP5Qk6AO9n2RhHDg977H5ooNQEucLq9BsTwkT OSEZ1J2VIIL5WziMUpzfJTEEp9Q0f5kHp5GUXvfqfyuQxksVZK7B/7ZkHEpYnthq JMGvmYs2YCKyxBJvi952H9M0f0lOTpM3H1+Xhe3lXb43YPaVsWHUmazZbhi25exo KDhSvYqXvKD6xY8e9hwYoiNAOAn/kdaahh7Zt6vNQ/14a/owqcYXOH6ayumayMMO 1wFYfOtwv1ss86twbBW/GXuLpCr4wulYJUrZd/KSXTNQNwTMc5oeCXVBPkbV7amq sSRrPID/enU= =oOei -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] libjs-jquery-colorpicker_1.2.8-1~bpo8+1_amd64.changes ACCEPTED into jessie-backports->backports-policy, jessie-backports
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 08 Mar 2017 22:02:27 +0100 Source: libjs-jquery-colorpicker Binary: libjs-jquery-colorpicker Architecture: source all Version: 1.2.8-1~bpo8+1 Distribution: jessie-backports Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Andreas Tille Description: libjs-jquery-colorpicker - full-featured colorpicker for jQuery UI Changes: libjs-jquery-colorpicker (1.2.8-1~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. Checksums-Sha1: 09cf26be7cb7aae194ea18b25fea3294fa7e0c07 2168 libjs-jquery-colorpicker_1.2.8-1~bpo8+1.dsc 7b96a53ccfc56c8e6e4c4d8a07ed1c63856db151 3388 libjs-jquery-colorpicker_1.2.8-1~bpo8+1.debian.tar.xz 9667978bc98745881d412485155fd7a30c04a715 166342 libjs-jquery-colorpicker_1.2.8-1~bpo8+1_all.deb Checksums-Sha256: 526a9a53621e424bec6bc0bbe4a9b821fcb34a481808360821cc5a8ced05c3e4 2168 libjs-jquery-colorpicker_1.2.8-1~bpo8+1.dsc 3ad7ebd0707256f4bfd4b490eee1e74fa1aa74e7c86a7a87fe847d97265898d7 3388 libjs-jquery-colorpicker_1.2.8-1~bpo8+1.debian.tar.xz a45baf6a969cf8bde39fe88737e95e2eac4b8931584f1ba6e70bca299f1d93a4 166342 libjs-jquery-colorpicker_1.2.8-1~bpo8+1_all.deb Files: ff5da2ac0cb6bad0d2cacaa0e30f8de0 2168 web optional libjs-jquery-colorpicker_1.2.8-1~bpo8+1.dsc c1afbdf80d9442ad34a39fd2565ee588 3388 web optional libjs-jquery-colorpicker_1.2.8-1~bpo8+1.debian.tar.xz 78c2acf6ac4a69e0f64b43b36797d551 166342 web optional libjs-jquery-colorpicker_1.2.8-1~bpo8+1_all.deb -BEGIN PGP SIGNATURE- iQJFBAEBCAAvFiEE8fAHMgoDVUHwpmPKV4oElNHGRtEFAljAcaMRHHRpbGxlQGRl Ymlhbi5vcmcACgkQV4oElNHGRtFSzQ//XCYiBCbPRfEZyAaclEwoCp+WgVS7v8Ma rHOHB+JblzwjDP/qyM8O84dZqmlvAdT2l4brc4KOiKw2eTfonNN9y94tr019yXyl Yr/2s1XtuWULPU4f3k7L6o9S0bfG7rnfqleQag1W7HuxC+imFOJALKSuOJf+cr3q MSzjQbC/R95Sx1/QhaE4mbTbn8VkYRQCvf2595u3VfgP7+yRLZNLRwD9aIF//2+2 p5331XeDJSSOxzlahkICxyh1mhgHGYITw/ae6GuFwK5S+phC/e/C0QELtqTaF7SN v5Rd5tJGHZ0EC63Yx273LEWCcT7iWLJ9KD4CQx1M9ONkvWIvnYLrDKuRQ0taU9Fl 0OunHiNRHiKXTX6VSA2y9Xt328dpk3Cmw7ev6sL5nDYCj24CEfLjb0xfmEkeiTl2 apH3WLR+9djki/tI8Cun0kKh7ta3cAnKD8T2WtRBDtxJv60Jz/KzH7PwDY557xTI JFIxox/rvK60tH6Qk5wrbedbvMbT6r5Ts1v4j8OyBrTf67EUPiQyJsgIdThRShTm lTekddbYLThTHE8/m7GL+3MlbPjI1ldSABTzwUH1e6QZMl/bnv7dQZx7FoP0mitR 1gPsr4cpNa/EFwNQYYA8CgzldtIfl8EgL8MWgkWXlF7AlM/9HQsdISYqqQKZ67V2 bxqWePr6vAI= =NwL0 -END PGP SIGNATURE- Thank you for your contribution to Debian. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] nodejs 4.7.2~dfsg-2 MIGRATED to testing
FYI: The status of the nodejs source package in Debian's testing distribution has changed. Previous version: 4.7.2~dfsg-1 Current version: 4.7.2~dfsg-2 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#857986: npm: This pakcage is 3 years old? (consider removal)
Package: npm Version: 1.4.21+ds-2 Severity: grave Justification: renders package unusable Sorry for opening such a non-standard bug report but this page leads me to believe that the most up-to-date version we have for this package on Debian is from 2014 (see changelog on the menu on the right side of the screen): https://packages.debian.org/sid/npm I don't see any indication anywhere that there is a reason or justification for this. Node.js and NPM have become standard tools for web development and the *extremely outdated* version proved by this package siomply doesn't work anymore. I suggest this package be entirely removed to avoid well-meaning users from comiong across all sorts of bugs and errors while using npm due to a lack of update in what has become an essential tool. If Debian maintainers can't keep this up-to-date, this package being here probably does more harm than good to your average user who expects it to "Just Work". I wouldn't say this if I didn't know for a fact that this outdated version simply doesn't work anymore with the package.json files that are on the NPM repository (try installing polymer, for example: npm install -g polymer ). Node.js provides a single package (for Node and NPM) in their own repository. I'm not sure if any efforct can be done to bring this package version into Debian's repositories but if that's not possible, I believe that having a 3-year old version is doing more harm than good and that it is better for Debian not to offer such - and have users install from the official repository instead or from the website Linux download. Repository insall instructions https://nodejs.org/en/download/package-manager/#debian-and-ubuntu-based-linux-distributions Simple download from website https://nodejs.org/en/ Again, I doubt this years-old package here is doing any good for most users, and I imagine it's doing more harm since people might not even noticed their NPM tool is extremely outdated, which will obviously lead to hard to understand errors. -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages npm depends on: pn node-abbrev pn node-ansi pn node-ansi-color-table pn node-archy pn node-block-stream pn node-fstream pn node-fstream-ignore pn node-github-url-from-git pn node-glob pn node-graceful-fs pn node-gyp pn node-inherits pn node-ini pn node-lockfile pn node-lru-cache pn node-minimatch pn node-mkdirp pn node-nopt pn node-npmlog pn node-once pn node-osenv pn node-read pn node-read-package-json pn node-request pn node-retry pn node-rimraf pn node-semver pn node-sha pn node-slide pn node-tar pn node-underscore pn node-which ii nodejs7.7.3-1nodesource1~jessie1 npm recommends no packages. npm suggests no packages. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#857986: npm: This pakcage is 3 years old? (consider removal)
Control: tags -1 + moreinfo Alex Henry wrote: > Severity: grave > Justification: renders package unusable Thank you for considering the severity of bug reports. You claim the package is unusable in general, but I don't see anything in your description that supports this. The only description of package behaviour you give is: > […] the *extremely outdated* version > proved by this package siomply doesn't work anymore. In what specific way does this package not work anymore? What should it do at version 1.4.21, what does it do instead on Debian? There must be some *specific, actionable* behaviour where the package behaves in a buggy way at version 1.4.21. So far this seems to be in fact a request to package a newer version, which is a “Severity: wishlist” request. -- \ `\ _o__) Ben Finney -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processed: Bug#857986: npm: This pakcage is 3 years old? (consider removal)
Processing control commands: > tags -1 + moreinfo Bug #857986 [npm] npm: This pakcage is 3 years old? (consider removal) Added tag(s) moreinfo. -- 857986: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857986 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#857991: npm2deb: Please Recommend npm instead of Depend
Package: npm2deb Version: 0.2.6-2 Severity: important I intend to ask removal of npm from testing. Jérémy. -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages npm2deb depends on: ii devscripts2.17.3 ii node-github-url-from-git 1.4.0-1 ii npm 1.4.21+ds-3 ii python3-dateutil 2.5.3-2 pn python3:any npm2deb recommends no packages. npm2deb suggests no packages. -- no debconf information -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#857993: rickshaw: Please do not build-depend on npm
Source: rickshaw Severity: important Please remove the useless Build-Depends: npm, for i intend to ask removal of npm from testing. The package builds fine in sbuild without npm. Jérémy -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#857986: npm: This pakcage is 3 years old? (consider removal)
2017-03-17 0:30 GMT+01:00 Ben Finney : > Control: tags -1 + moreinfo > > Alex Henry wrote: >> Severity: grave >> Justification: renders package unusable > > Thank you for considering the severity of bug reports. You claim the > package is unusable in general, but I don't see anything in your > description that supports this. > > The only description of package behaviour you give is: > >> […] the *extremely outdated* version >> proved by this package siomply doesn't work anymore. > > In what specific way does this package not work anymore? What should it > do at version 1.4.21, what does it do instead on Debian? There must be > some *specific, actionable* behaviour where the package behaves in a > buggy way at version 1.4.21. > > So far this seems to be in fact a request to package a newer version, > which is a “Severity: wishlist” request. I should have done this long before, but npm should not stay in testing: - `npm install thisorthatmodule` is failing for a growing list of modules - npmjs.org might drop support for this old client at anytime now - it's not supportable (security-wise) and i'd advise against using it I'll use block this bug by the handful of packages depending on npm. Jérémy -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processed: blocking reverse(build)dependencies
Processing commands for cont...@bugs.debian.org: > block 857986 by 857988 857989 857990 857991 957993 857994 Bug #857986 [npm] npm: This pakcage is 3 years old? (consider removal) 857986 was not blocked by any bugs. 857986 was not blocking any bugs. Added blocking bug(s) of 857986: 857991, 857990, 857988, 857989, and 857994 > End of message, stopping processing here. Please contact me if you need assistance. -- 857986: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857986 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processed: typo
Processing commands for cont...@bugs.debian.org: > block 857986 by 857993 Bug #857986 [npm] npm: This pakcage is 3 years old? (consider removal) 857986 was blocked by: 857990 857988 857989 857994 857991 857986 was not blocking any bugs. Added blocking bug(s) of 857986: 857993 > End of message, stopping processing here. Please contact me if you need assistance. -- 857986: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857986 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#857986: npm: This pakcage is 3 years old? (consider removal)
I actually did give a use case for this: try installing polymer as per the instruction given on my initial report. It just doesn't work, as Jeremy states. NPM is a growing, dynamic repository and you'll be hard pressed to find any major package that is 3 years old and 100% compatible with the current version of this package in Debian. So yes, as I said before, and I stand by it, the fact it is so old and the NPM repository has continued to advance does, indeed "render [the] package unusable". Or as Jeremy puts it: "npm install thisorthatmodule` is failing for a growing list of modules". This is the most basic NPM operation and it is failing 100% of the time in many cases. Of course this can be fixed by updating the NPM version to the current version, as Ben says, but it shouldn't demote the priority to "wishlist": there's a real problem here with possible security implication (re Jeremy) and a major loss of usability (yes, to the point of "renders package unusable"). But anyway, if it was a simple thing to do, I'm sure someone would have done it at some point after 2014, so my first suggestion was to consider removal altogether. Jeremy, thank you for following through with this. I know asking for package removal is a big thing in Debian but if NPM is to stay, it needs to be up-to-date, and if it isn't, it better that it be removed. I think that's the best choice for now, thanks again! On 16 March 2017 at 20:50, Jérémy Lal wrote: > 2017-03-17 0:30 GMT+01:00 Ben Finney : > > Control: tags -1 + moreinfo > > > > Alex Henry wrote: > >> Severity: grave > >> Justification: renders package unusable > > > > Thank you for considering the severity of bug reports. You claim the > > package is unusable in general, but I don't see anything in your > > description that supports this. > > > > The only description of package behaviour you give is: > > > >> […] the *extremely outdated* version > >> proved by this package siomply doesn't work anymore. > > > > In what specific way does this package not work anymore? What should it > > do at version 1.4.21, what does it do instead on Debian? There must be > > some *specific, actionable* behaviour where the package behaves in a > > buggy way at version 1.4.21. > > > > So far this seems to be in fact a request to package a newer version, > > which is a “Severity: wishlist” request. > > I should have done this long before, but npm should not stay in testing: > - `npm install thisorthatmodule` is failing for a growing list of modules > - npmjs.org might drop support for this old client at anytime now > - it's not supportable (security-wise) and i'd advise against using it > > I'll use block this bug by the handful of packages depending on npm. > > Jérémy > > -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Processed: tagging 857986, tagging 857294, tagging 857385
Processing commands for cont...@bugs.debian.org: > tags 857986 + sid stretch Bug #857986 [npm] npm: This pakcage is 3 years old? (consider removal) Added tag(s) stretch and sid. > tags 857294 + sid Bug #857294 [src:asterisk-prompt-es] asterisk-prompt-es: should be removed from the archive? Added tag(s) sid. > tags 857385 + sid Bug #857385 [src:jablicator] jablicator: should it be removed from the archive? Added tag(s) sid. > thanks Stopping processing here. Please contact me if you need assistance. -- 857294: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857294 857385: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857385 857986: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857986 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel