Your message dated Thu, 25 Jun 2026 11:12:57 -0700
with message-id <[email protected]>
and subject line Re: Your mail
has caused the Debian Bug report #949537,
regarding elpa-elfeed-web: depends on CSS and JavaScript not in Debian
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
949537: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949537
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: elpa-elfeed-web
Version: 3.1.0-1
Severity: serious
Control: block -1 by 902083
Control: found -1 3.3.0-1
elfeed-web uses Foundation [1], AngularJS [2], and URI.js [3], loading
them from various CDN sites in index.html:
<link rel="stylesheet"
href="//cdn.jsdelivr.net/foundation/4.3.1/css/foundation.min.css"/>
<script
src="//ajax.googleapis.com/ajax/libs/angularjs/1.0.7/angular.min.js"></script>
<script
src="//cdnjs.cloudflare.com/ajax/libs/URI.js/1.7.2/URI.min.js"></script>
AngularJS is included in main, but Foundation and URI.js are not. This
is probably a violation of Policy 2.2.1, which states that “None of the
packages in the main archive area requires software outside of that
area to function.”
Ideally, Debian’s elfeed-web should Depend on packages containing
Foundation, AngularJS, and URI.js, and it should be patched to load
those resources from the same origin as index.html. There’s already an
ITP for URI.js, which I’ve marked as a blocker for this bug.
[1] https://foundation.zurb.com/
[2] https://angularjs.org/
[3] https://medialize.github.io/URI.js/
--- End Message ---
--- Begin Message ---
Version: 4.0.0-1
Since elfeed-web 4.0.0, all aforementioned dependencies (AngularJs,
foundation css, URI.js) are dropped upstream, so the package is clean
for main again.
OpenPGP_signature.asc
Description: OpenPGP digital signature
--- End Message ---
