On 09/23/2013 05:48 AM, Michał Górny wrote: > Dnia 2013-09-22, o godz. 17:17:53 > ""Paweł Hajdan, Jr."" <phajdan...@gentoo.org> napisał(a): > >> I'd like maintainers of all packages depending on dev-lang/v8 to make >> their packages use bundled v8 copy instead (I can file bugs for that, >> let's discuss here whether it should be done). >> >> For now V8 upstream gives no guarantees about API/ABI stability and >> actually breaks it very often >> (<http://upstream-tracker.org/versions/v8.html>). Having a shared >> library so closely tied to packages (which results in frustrating >> blockers, since v8 is updated often and chromium is synchronized with >> that) is not really much different from everyone bundling the library. >> I'd like that to improve, but for now it's time for a pragmatic solution >> to this IMHO. > > If this trend continues, I think we should work on some technical way > of tracking bundled libraries, e.g. for security issues. Like ebuilds > listing the corresponding Gentoo packages, like: > > QA_BUNDLES="dev-foo/bar-1.2.3" >
One idea is to make a new bundled-lib category for virtual packages and then make virtual package for each library that is bundled.
signature.asc
Description: OpenPGP digital signature
