Le 21/02/2021 à 08:08, Paul Gevers a écrit : > Hi Yadd, > > On 20-02-2021 08:43, Yadd wrote: >> node-uglifyjs-webpack-plugin is RC-Buggy because upstream is dead since >> July 2019 (#977311). The main problem to remove it is that it requires >> to update webpack which has many reverse dependencies. I tried it in >> experimental branch but it is not simple and requires many patches in >> many packages. > > We came to the same conclusion some time ago and it's on our can-defer > list already (which is less definite than ignore, and means we'll go > over it in due time). > > https://udd.debian.org/dev/bugs.cgi?merged=ign&rc=1&format=html&release=bullseye_and_sid&done=ign&deferred=ign&rtbullseye-is-blocker=ign&rtbullseye-can-defer=only&keypackages=only&cpopcon=1&chints=1&ckeypackage=1&ctags=1&cdeferred=1&caffected=1&cmissingbuilds=1&clastupload=1&crttags=1&cautormtime=1&cwhykey=1&cbritney=1&sortby=last_modified&sorto=asc&#results > >> I think JS Team is able to maintain node-uglifyjs-webpack-plugin is case >> of security problem. That's why I think we could ignore #977311 and >> #982766 for Bullseye. > > Thanks for contacting us.
Perfect, thank you!
