Quoting Petter Reinholdtsen (2018-10-05 09:25:39) > [Petter Reinholdtsen] > > I had a look at version 1.5.1, and discovered that it introduced > > three new dependencies, googleapis, httpolyglot and yawl. The last > > one is already in Debian, while the first two seem to be missing. I > > registered RPFs for them to at least have done a small step in the > > right direction. > > An alternative to packaging these dependencies as independent > packages, is to embed them in groovebasin like is already done with > four of the dependencies. They are added as d/patches/ entries. It > can be a nice way to get an updated version into the archive, while > waiting for the new dependencies to make it into the archive on their > own. > > Embedding copies is hard to maintain archive-wise, because any > security fix need to be applied to all the embedded copies, so we > should be reluctant do use that approach for much used code.
Yes - avoiding embedded code copies is a "should" in Debian Policy. I therefore recommend against expanding on that bad practice! - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private