** Description changed:

- TBD
+ [Availability]
+ The package src:dh-elpa is already in Ubuntu universe.
+ The package dh-elpa-helper build for the architectures it is designed to work 
on
+ It currently builds and works for architectures: all (arch independent)
+ Link to package [[https://launchpad.net/ubuntu/+source/dh-elpa|src:dh-elpa]]
+ 
+ It is enough to promote the dh-elpa-helper binary to main.
+ 
+ [Rationale]
+ - The package dh-elpa-helper is required in Ubuntu main as src:cmake 
dependency
+ - The package src:dh-helper will not generally be useful for a large part of
+   our user base, but is important/helpful still because it is a higher level
+   abstraction layer around src:emacsen-common that is used by src:cmake and
+   others to unify the installation of elpa packages (like "cmake-mode").
+ - Additional reasons: we provided syntax highlighting and indentation for
+   CMakeLists.txt and *.cmake source files in emacs previously and do not want
+   to drop that.
+ - Additionally new use-cases enabled by this are: NONE, just keeping status 
quo
+ - Package dh-elpa covers the same use case as emacsen-common, but is better
+   because it is a higher level abstraction layer, thereby we want to put it on
+   top to avoid common errors such as https://bugs.debian.org/802915
+ - The package dh-elpa-helper is a new runtime dependency of package cmake-data
+   that we already support
+ 
+ [Security]
+ - No CVEs/security issues in this software in the past
+ - no `suid` or `sgid` binaries
+ - no executables in `/sbin` and `/usr/sbin`
+ - Package does not install services
+ - Packages does not open privileged ports (ports < 1024)
+ - Packages does not contain extensions to security-sensitive software
+   (filters, scanners, plugins, UI skins, ...) – it provides an extension to 
the
+   debhelper build environment, tho.
+ 
+ [Quality assurance - function/usage]
+ - The package works well right after install – if elpa dehbehlper and
+   ${elpa:Depends} are being used
+ 
+ [Quality assurance - maintenance]
+ - The package is maintained well in Debian/Ubuntu and has not too many
+   and long term critical bugs open
+   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/dh-elpa/+bug => 0 bugs
+   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=dh-elpa
+     => no critical bugs, but 1 long standing bug, classified as "important"
+        https://bugs.debian.org/886024 It cannot be reproduced by the upstream
+        developers and morphed more into a proposal that the maintainers are
+        unconvinced of, therefore it stalled
+     => Another interesting bug is https://bugs.debian.org/995936 that is being
+        discussed as of recently and would remove the Ubuntu delta if resolved.
+ - The package does not deal with exotic hardware we cannot support
+ 
+ [Quality assurance - testing]
+ - The package does not run a test at build time. ELPA_NAME is set and 
./dh_elpa
+   executed but that doesn't seem to fail the build anything is wrong.
+ - The package does not run an autopkgtest because non is provided in
+   debian/tests
+ - README.org states a limitation: "This tool is currently not very well 
tested."
+ - We could try adding an autopkgtest that builds a simple elpa package, as
+   descibed in https://wiki.debian.org/Teams/DebianEmacsenTeam/elpa-hello, that
+   we could maybe also run at build time.
+ 
+ [Quality assurance - packaging]
+ - debian/watch is present and works
+ - This package does not yield massive lintian Warnings, Errors
+   => out-of-date-standards-version could/should be updated
+ - Link to recent build log including a lintian run 
https://paste.ubuntu.com/p/4GRz5zJS8w/
+ - Lintian overrides are present, but ok because debian/watch is present, even
+   though this is a native package, but watchfile is used with pkg-emacsen PET
+ - This package does not rely on obsolete or about to be demoted packages.
+ - This package has no python2 or GTK2 dependencies
+ - The package will not be installed by default
+ - Packaging and build is easy, link to d/rules 
https://paste.ubuntu.com/p/km3WdffNcJ/
+ 
+ [UI standards]
+ - Application is not end-user facing (does not need translation)
+ 
+ [Dependencies]
+ - No further depends or recommends dependencies that are not yet in main
+ 
+ [Standards compliance]
+ - This package correctly follows FHS and Debian Policy
+ 
+ [Maintenance/Owner]
+ - Team is not yet, but will subscribe to the package before promotion
+   => I suggest the desktop team to take care of this package, as it is an
+      abstraction layer above emacsen-common, that is being owned by the 
desktop
+      team.
+ - This does not use static builds
+ - This does not use vendored code
+ 
+ [Background information]
+ - The Package description explains the package well
+ - Upstream Name is dh-elpa
+ - Link to upstream project https://salsa.debian.org/emacsen-team/dh-elpa
+ - This package is a native Debian package, created & maintained by the Debian
+   Emacsen team.
+ 
+ [TODO]
+ I suggest the following TODOs before this is ready for promotion:
+ - subscribe ~desktop-packages (as this is a higher level abstraction of
+   emacsen-common)
+ - merge the latests upstream version from Debian
+ - update the standards version
+ - add an autopkgtests to build a simple "elpa-hello" package, as described in
+   https://wiki.debian.org/Teams/DebianEmacsenTeam/elpa-hello

** Changed in: dh-elpa (Ubuntu)
       Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1951066

Title:
  [MIR] dh-elpa

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cmake/+bug/1951066/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to