Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-15 Thread Phil Morrell
Thanks to Adrian and pabs for their corrections on documenting security support, and there wasn't too much objection to the summary, more to the sad state of affairs that leads to it and a bit of clarification. I believe all the major points have cc'd 907051, so would like to encourage someone

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-12 Thread Adrian Bunk
On Thu, Sep 02, 2021 at 11:38:35PM +0100, Phil Morrell wrote: >... > 4. When 2 or 3 are too onerous to maintain, the package MAY use the >convenience copy but MUST document why in README.source and SHOULD be >included in the [security-tracker]. >... The package MUST be listed as being

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-03 Thread Simon McVittie
On Fri, 03 Sep 2021 at 02:46:20 +0200, Jonas Smedegaard wrote: > I suspect that it helps if separating reasons for _encouraging_ > embedding (tiny upstream projects and deeply integrated sets of > upstreams, I guess) from reasons for _discouraging_ embdding (all other > cases, I guess). If the

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-03 Thread Bastien Roucariès
Le jeudi 2 septembre 2021, 22:38:35 UTC Phil Morrell a écrit : > Over this last year there seems to have been a noticeable divergence of > maintainer opinion, on what has become known as vendoring, from a strict > reading of [policy 4.13]. I think it's notable that the heading is > [Embedded]

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-02 Thread Paul Wise
On Thu, Sep 2, 2021 at 10:39 PM Phil Morrell wrote: > Over this last year there seems to have been a noticeable divergence of > maintainer opinion, on what has become known as vendoring Embedded copies of code/etc have downsides ... https://wiki.debian.org/EmbeddedCopies > It is my reading of

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-02 Thread Jonas Smedegaard
Quoting Phil Morrell (2021-09-03 03:30:04) > On Fri, Sep 03, 2021 at 02:46:20AM +0200, Jonas Smedegaard wrote: > > First of all, thanks for compiling the list of reasonings. > > Thanks for taking the time to read through it, I was hoping it would > be a useful observation. > > > I get the

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-02 Thread Jonas Smedegaard
Hi Phil, First of all, thanks for compiling the list of reasonings. I get the impression that you are framing current state of embedding as a generally good thing to do, and if I understand that correctly then I disagree with it. I suspect that it helps if separating reasons for _encouraging_

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-02 Thread Jérémy Lal
Le ven. 3 sept. 2021 à 00:39, Phil Morrell a écrit : > Over this last year there seems to have been a noticeable divergence of > maintainer opinion, on what has become known as vendoring, from a strict > reading of [policy 4.13]. I think it's notable that the heading is > [Embedded] copies and

Bug#907051: Finding rough consensus on level of vendoring for large upstreams

2021-09-02 Thread Phil Morrell
Over this last year there seems to have been a noticeable divergence of maintainer opinion, on what has become known as vendoring, from a strict reading of [policy 4.13]. I think it's notable that the heading is [Embedded] copies and was [Convenience] copies since its inception, thankfully I found