> > Thanks for your contribution. However note that we cannot use your > packaging > for the official Debian package, because AFAIK npm downloads the > javascript > libraries at build time, which is clearly not acceptable in Debian. > The full > source needs to be included in the tarball (and the package needs to > be > buildable without network access). >
I'm a Debian Developer too so know about the need to build in a chroot with no network. I'd was confused how to update get-orig-source, and saw others had been too, so I wanted to leave some documentation about what I'd tried. zotero wont build with the version of npm in Debian, so I spent some time experimenting with npm 5.6 to see if I could get that to build. I learned npm 5.6 has a "prefer-offline" option that appears to prefer locally installed Debian packages. I was able to build a .deb file for npm 5.6, but the resulting install doesn't work. I think the install file is missing something. There are still some embedded copies of code that don't have a Debian equivalent. Although I did see that the Debian JS team shipped 1.4.21 with some embedded copies of code, so that might not be a deal breaker. I need to get in touch with them I haven't reviewed the changes to npm's copyright file either, so I don't know how much of a problem that'll be. Diane
signature.asc
Description: This is a digitally signed message part

