On Fri, Dec 9, 2016 at 1:44 AM, Yann Ylavic <ylavic....@gmail.com> wrote:
> On Thu, Dec 8, 2016 at 7:16 PM, William A Rowe Jr <wr...@rowe-clan.net> > wrote: > > > > It does raise the question again of whether the httpd project can > distribute > > a source code package on www.apache.org/dist/httpd/ which is not voted > > on by the project, and whether it violates the spirit of the pmc > consensus > > to no longer be the distributor of dependencies which frequently fall > into > > a poorly maintained/updated state. > > Current httpd-2.4.23-deps.tar.*/srclib seem to contain APR(-util) > only, no expat or PCRE, wasn't this decision taken already? > The decision in Nov 2008 to drop pcre was followed, that was not in any -deps 'not-a-release' tarball. Expat was more deeply embedded; httpd-2.4.23/srclib/apr-util/xml/expat/ > httpd-2.2.32.tar.*/srclib contain PCRE 5.0 (according to Changelog), > no expat, but it looks off topic for this T&R... > Yup, I'm working on language that would accompany httpd-2.2.32.tar.gz that the distribution includes ancient, bundled legacy binary-compatible pcre and expat, and that users are strongly cautioned to provision pcre, expat and the most current versions of apr and apr-util themselves from the respective projects or their OS distribution.
