> Michael Meskes dijo [Sat, Feb 17, 2018 at 01:57:53PM +0100]:
> > I disagree, it is not maintainable source code, yes, but source
> > code
> > nonetheless. According to wikipedia source code is:
> > ...
>
> Some others have answered to this claim. As I understand it, source
> code should ideally
On Sun, Feb 18, 2018 at 2:59 AM, Thorsten Alteholz wrote:
> Other javascript libraries like libjs-* and *.js even don't get a CVE. So
> either they are secure or nobody cares.
We also miss out on some JS vulnerabilities because NodeSecurity don't
systematically participate in the CVE system and w
On Sat, Feb 17, 2018 at 9:20 PM, Paul Wise wrote:
> It may be code but it is definitely not source in the sense of DFSG
> item 2 or the GPL.
Also, non-minified JavaScript can also not be source code, for example
in the case it was generated from CoffeeScript or some other language.
--
bye,
pabs
原始訊息
寄件者： Colin Watson
已傳送： Sonntag, 18. Februar 2018 10:15
收件者： debian-devel@lists.debian.org
主旨： Re: What can Debian do to provide complex applications to its users?
On Sat, Feb 17, 2018 at 07:22:05PM +0100, Tollef Fog Heen wrote:
> I think there's at least two types of vendoring you're re
Hi,
On Sat, 17 Feb 2018 13:10:50 -0500
Robert Edmonds wrote:
> I ran into the same problem. It looks like it was due to #889665 being
> fixed and not having the libu2f-udev package installed.
This fixes the problem, thanks Robert!
On Sat, 17 Feb 2018 19:32:09 +0100
Bastian Blank wrote:
> And
On Sat, Feb 17, 2018 at 07:22:05PM +0100, Tollef Fog Heen wrote:
> I think there's at least two types of vendoring you're referring to
> here, and they're substantially different.
>
> One is how Go currently does (but my understanding is that this is
> changing in newer versions). Here, the sourc
On Sat, Feb 17, 2018 at 10:32:09AM -0700, Sean Whitton wrote:
> > So if you are claiming we have no manpower that's pretty much our own
> > fault since we do not actively care. There are ways to attract gifted
> > and interested people if we would only try.
>
> I was making a more specific claim
On Mon, Feb 12, 2018 at 10:28:33AM +, Colin Watson wrote:
> Does this seem like a reasonable way forward, or should I instead just
> apply the backport as an ordinary patch and override
> license-problem-non-free-RFC for the patch file?
Thanks for the feedback, everyone. While I do like Rapha
On Sat, Feb 17, 2018 at 08:42:44PM +0100, Adam Borowski wrote:
> Binary code that has debug symbols isn't that bad. I don't think you can
> have those for minified JS.
JavaScript source maps have been around for a few years and AIUI are
pretty much exactly that.
--
Colin Watson
Michael Meskes dijo [Sat, Feb 17, 2018 at 01:57:53PM +0100]:
> > Minification is quite comparable to compilation. I will give you some
> > examples from my frustration with Drupal8 in this answer. This can no
> > longer be seen as source code:
> > ...
>
> I disagree, it is not maintainable source
Package: wnpp
Severity: wishlist
Owner: Kurian Benoy
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-date-time
Version : 2.1.0
Upstream Author : Sindre Sorhus (sindresorhus.com)
* URL : https://github.com/sindresorhus/date-time#readme
* License
Hi Raphael,
On Sat, Feb 17, 2018 at 08:36:41PM +0100, Raphael Hertzog wrote:
> > A mailing list is not just helpful to distribute e-mails to certain
> > people. The mail archive feature is a very valuable thing to refer to
> > previous mails which as far as I understand is not provided by
> > tra
Package: wnpp
Severity: wishlist
Owner: NIRMAL K V
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name : node-stream-iterate
Version : 1.2.0
Upstream Author : Mathias Buus (@mafintosh)
* URL : https://github.com/mafintosh/stream-iterate
* License : Expat
Programming Lang: JavaScript
De
Package: wnpp
Severity: wishlist
Owner: ARJUN LAL
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-ansi-wrap
Version : 0.1.0
Upstream Author : Jon Schlinkert (https://github.com/jonschlinkert)
* URL : https://github.com/jonschlinkert/ansi-wrap
* License
Package: wnpp
Severity: wishlist
Owner: SREERAJ R MENON
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-binaryextensions
Version : 2.1.1
Upstream Author : 2013+ Bevry Pty Ltd (http://bevry.me)
* URL : https://github.com/bevry/binaryextensions
* Licens
On Sat, Feb 17, 2018 at 01:24:30PM -0500, Sergio Durigan Junior wrote:
> On Saturday, February 17 2018, Michael Meskes wrote:
> > I disagree, it is not maintainable source code, yes, but source code
> > nonetheless. According to wikipedia source code is:
> >
> > In computing, source code is any col
Package: wnpp
Severity: wishlist
Owner: Bipin B Narayan
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name : node-module-not-found-error
Version : 1.0.1
Upstream Author : Ben Drucker (bendrucker.me)
* URL : https://github.com/bendrucker/module-not-found-erro
Hi,
On Sat, 17 Feb 2018, Andreas Tille wrote:
> On Fri, Feb 16, 2018 at 02:10:30PM +0100, Raphael Hertzog wrote:
> > On Fri, 19 Jan 2018, Jeremy Bicha wrote:
> > > 3. If a team manages to get a lists.debian.org address, it's
> > > recommended that they switch the Maintainer fields in their package
Hello,
On Tue, 26 Dec 2017, Mehdi Dogguy wrote:
> For example, have a look at the following packages:
> - https://tracker.debian.org/pkg/siridb-server
> - https://tracker.debian.org/pkg/libcleri
>
> The maintainer box is not even shown. I guess this might be a bug to file
> against tracker.debian
Package: wnpp
Severity: wishlist
Owner: Michael Meskes
* Package name: webext-proxy-switcher
Version :
Upstream Author :
* URL : https://github.com/rNeomy/proxy-switcher
* License :
Programming Lang: Javascript
Description : Modify Proxy Settings for
On Saturday, February 17 2018, Michael Meskes wrote:
>> Minification is quite comparable to compilation. I will give you some
>> examples from my frustration with Drupal8 in this answer. This can no
>> longer be seen as source code:
>> ...
>
> I disagree, it is not maintainable source code, yes, b
Package: wnpp
Severity: wishlist
Owner: Anupam Asok
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name : node-callsites
Version : 2.0.0
Upstream Author : Sindre Sorhus (sindresorhus.com)
* URL : https://github.com/sindresorhus/callsites#readme
* License : Expat
Programming Lang: JavaS
Package: wnpp
Severity: wishlist
Owner: Adarsh P S
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-fast-json-stable-stringify
Version : 2.0.0
Upstream Author : James Halliday (http://substack.net)
* URL :
https://github.com/epoberezkin/fast-json-stabl
Package: wnpp
Severity: wishlist
Owner: VISAKH S
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-agentkeepalive
Version : 3.3.0
Upstream Author : fengmk2 (https://fengmk2.com)
* URL : https://github.com/node-modules/agentkeepalive#readme
* License
Hi Sean,
On Sat, 17 Feb 2018, Sean Whitton wrote:
I was making a more specific claim -- we don't and will never have the
manpower to provide security support for multiple different versions of
hundreds of little JavaScript libraries.
please have a look at for example CVE-2017-18077 [1] in the
Package: wnpp
Severity: wishlist
Owner: Michael Meskes
* Package name: node-mithril
Version : 1.1.6
Upstream Author : Leo Horie and others
* URL : https://github.com/MithrilJS/mithril.js
* License : MIT
Programming Lang: Javascript
Description : Javasc
On Sat, Feb 17, 2018 at 01:10:50PM -0500, Robert Edmonds wrote:
> I ran into the same problem. It looks like it was due to #889665 being
> fixed and not having the libu2f-udev package installed.
And chromium does not recommends that at all.
Bastian
--
The heart is not a logical organ.
Package: wnpp
Severity: wishlist
Owner: Dhawal Negi
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-clear-require
Version : 2.0.0
Upstream Author : Sindre Sorhus (sindresorhus.com)
* URL : https://github.com/sindresorhus/clear-require#readme
* License
]] Russ Allbery
> Paul Wise writes:
>
> > I think the discussion we are having here is orthogonal to
> > containers/flatpaks.
>
> > If Debian were to have a repository of containers/flatpaks, then it
> > should meet Debian standards. We cannot just say "here are some
> > containers, completely
Hideki Yamane wrote:
> Hi,
>
> Today, I've tried to login salsa.debian.org, 2FA doesn't work well
> (and on github, too). It works several days ago.
>
> The message on salsa is
> >>There was a problem communicating with your device. (error code: 1)
>
> On my desktop (sid)
> - chrome / chrom
Package: wnpp
Severity: wishlist
Owner: Subin Siby
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-js-string-escape
Version : 1.0.1
Upstream Author : Jo Liss
* URL : https://github.com/joliss/js-string-escape#readme
* License : Expat
Program
> On Sat, Feb 17, 2018 at 01:51:38PM +0100, Michael Meskes wrote:
> > Then I guess the question is, what is Debian?
> >
> > Does a different and additional package format change the project?
>
> It seems like you're not reading what other people have said--tt has
Well I try, but I'm certainly n
Paul Wise writes:
> I think the discussion we are having here is orthogonal to
> containers/flatpaks.
> If Debian were to have a repository of containers/flatpaks, then it
> should meet Debian standards. We cannot just say "here are some
> containers, completely unsupported and might not up to o
Hello Paul,
On Sat, Feb 17 2018, Paul Wise wrote:
> I think the discussion we are having here is orthogonal to
>containers/flatpaks.
>
> If Debian were to have a repository of containers/flatpaks, then it
> should meet Debian standards. We cannot just say "here are some
> containers, completely u
Hello Andreas,
On Sat, Feb 17 2018, Andreas Tille wrote:
> On Fri, Feb 16, 2018 at 11:51:20AM -0700, Sean Whitton wrote:
>> We do not, and probably never will have, the required manpower.
>
> So if you are claiming we have no manpower that's pretty much our own
> fault since we do not actively ca
Package: wnpp
Severity: wishlist
Owner: PAVITHRA
X-Debbugs-CC: debian-devel@lists.debian.org
* Package name: node-fill-keys
Version : 1.0.2
Upstream Author : Ben Drucker (bendrucker.me)
* URL : https://github.com/bendrucker/fill-keys#readme
* License : Expat
Hi,
Today, I've tried to login salsa.debian.org, 2FA doesn't work well
(and on github, too). It works several days ago.
The message on salsa is
>>There was a problem communicating with your device. (error code: 1)
On my desktop (sid)
- chrome / chromium / chrome-unstable doesn't work
- wit
On Sat, Feb 17, 2018 at 01:51:38PM +0100, Michael Meskes wrote:
Then I guess the question is, what is Debian?
Does a different and additional package format change the project?
It seems like you're not reading what other people have said--tt has
nothing to do with the packaging format, it has
Raphael Hertzog schrieb:
> What do you think? Do you have other ideas? Are there other persons
> who are annoyed by the current situation?
There's clearly a set of software which is of high quality, but where
upstream's development practices are not usefully aligned with our
existing distro model
On 2018-02-17 13:57, Michael Meskes wrote:
> I disagree, it is not maintainable source code, yes, but source code
> nonetheless. According to wikipedia source code is:
>
> In computing, source code is any collection of computer instructions,
> possibly with comments, written using[1] a human-readab
Laba diena,
Noriu Jus informuoti apie šių metų pasikeitimą dėl atnaujintos visos Lietuvos
įmonių bazės 2018 metų sausio vidurio.
Visi juridiniai asmenys pateikti bazėje yra veikiantys, realiai vykdantys
veiklą, turintys įdarbintų darbuotojų. Duomenys pagal Sodrą, Registrų centrą.
Bazėje nurod
On Sat, Feb 17, 2018 at 8:57 PM, Michael Meskes wrote:
> I disagree, it is not maintainable source code, yes, but source code
> nonetheless. According to wikipedia source code is:
>
> In computing, source code is any collection of computer instructions,
> possibly with comments, written using[1] a
On Sat, 17 Feb 2018, Michael Meskes wrote:
>> Minification is quite comparable to compilation. I will give you some
>> examples from my frustration with Drupal8 in this answer. This can no
>> longer be seen as source code:
>> ...
>
> I disagree, it is not maintainable source code, yes, but source
Michael Meskes, on sam. 17 févr. 2018 13:57:53 +0100, wrote:
> > Minification is quite comparable to compilation. I will give you some
> > examples from my frustration with Drupal8 in this answer. This can no
> > longer be seen as source code:
> > ...
>
> I disagree, it is not maintainable source
> I don't know where you got figures to support this case, but I have
> the
> inverse feeling (and no figures either). Arch is taking away our
> desktop
> users, Ubuntu is taking away our cloud users, Alpine is taking away
> our
> container users and CoreOS/Atomic Host are taking away users
> inter
> Minification is quite comparable to compilation. I will give you some
> examples from my frustration with Drupal8 in this answer. This can no
> longer be seen as source code:
> ...
I disagree, it is not maintainable source code, yes, but source code
nonetheless. According to wikipedia source cod
Am Freitag, den 16.02.2018, 17:22 -0500 schrieb Michael Stone:
> On Fri, Feb 16, 2018 at 10:01:53PM +0100, Michael Meskes wrote:
> > True, that's why I think we should look for a different solutions.
>
> There are different solutions, but the result isn't debian, it's
> something else with a diff
Package: wnpp
Severity: wishlist
Owner: Thomas Goirand
* Package name: python3-antlr3
Version : 3.5.2
Upstream Author : Terence Parr
* URL : https://github.com/antlr/antlr3
* License : BSD-3-clause
Programming Lang: Python
Description : ANother Tool fo
On Fri, Feb 16, 2018 at 11:51:20AM -0700, Sean Whitton wrote:
> We do not, and probably never
> will have, the required manpower.
Since 2012 I'm maintaining a survey in wiki[1] where developers are
giving reasons why they entered Debian. I presented the result in
several talks the first time at F
❦ 16 février 2018 17:25 GMT, Holger Levsen :
>> Well, strictly speaking Debian does not actually need to be involved
>> then, applications are already doing that. But it's indeed a sign that
>> Debian is losing relevance, which is concerning and Debian could have to
>> do something about it.
>
Hi Raphael,
On Fri, Feb 16, 2018 at 02:10:30PM +0100, Raphael Hertzog wrote:
> On Fri, 19 Jan 2018, Jeremy Bicha wrote:
> > 3. If a team manages to get a lists.debian.org address, it's
> > recommended that they switch the Maintainer fields in their packages
> > from the Alioth list address to that
51 matches
Mail list logo
