Package: ruby-babel-source Version: 5.8.35-1 Severity: important -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Hi, Great that you you have packaged ruby-babel-source. Unfortunately, in its current form this package ships Javascript libraries babel and core-js¹. ¹ Polyfills merged with Regenerater and called "babel-polyfill": <http://babeljs.io/docs/usage/polyfill/> Instead, a) those libraries should be packaged separately, tracking their own upstream sources <https://github.com/babel/babel> and <https://github.com/zloirock/core-js>, b) babel-polyfill should be packaged separately (either build-depending on Regenerator or created some way), and c) this package should symlink those libraries and depend on those other packages. See Debian Policy § 4.13 for more info. - Jonas -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJX0VCkAAoJECx8MUbBoAEh+tsQAIodwzwM5GRwd9hcc/jtjd4G 7ntgffjWT5clwarA4ECO9nTFUYdRTYsjQdswoFslWc0oGXOAonReEiITn91wN/5o fE9ff9MkOLM+qvjFCsbHNG/k+cBNjY919B/MVeb9I5RVxrRvJQAgJ+LZz5HOvwTT mLIGK6PNPlZcbb85CiS3HyCbz5uNanAIZuR3kAjbv30ySSr7I7EpEVzrtaTeY5h/ f3pD8DlVF6U/HT57SUBdJ0YZisRJEJdi8JXvDRGK/pNzF21Wp4fXJpJ90gEuM/YX rYhmQp9C6gkl0Yxl+dcU4rNtFgZtEpVf0YXeOx/ygaNoPe8YdqJstqctiTvqShIx DSQc3cNdvVLHuQahSi/lcNubgZmf/jZxgUsnrFeivIsrkZ7sg5HcHDyuIQ/XDBW2 Qw1VilBYWLf2p1kKR9vxN2QLHR6L8MUDWFmN48loXX8DU6vHv8eYD7ZgRTeYrFqa TrvpCwhZrHyoji00OTGDdTTAtzD9TriEpEwD/nvbnUhdCrlKoa3FLiXLa9SExTrL Htd1PNQMe0fITKIAXUpe/0vkZHgbyJ1QTbtiqWLE5FQd/kJNXjiks/uDc/Vh3QKx K+hSX/bBU/0f2Ii3ZWf3N67lEMvtj/kVILNuIITofzzLiIvpMi/CfHlRRg6dHF0C MO9FzMK0Y9nTyu4/Cdzq =fpIj -----END PGP SIGNATURE-----