Le 01/09/2019 à 12:26, Pirate Praveen a écrit : > > > On Thu, Aug 15, 2019 at 5:44 PM, Xavier <[email protected]> wrote: >> Hi all, To increase embedding quality and security, I plan to do this: >> * tools for easier embedding (~done in pkg-js-tools >= 0.9.5) + >> add-node-component + del-node-component + auto_configure: creates >> component links in node_modules and links between component if needed >> + auto_test : component are tested if debian/nodejs/<component>/test >> exists + auto_install : component are installed by default in >> <module-path>/node_modules/<name> but it is configurable easily * fix >> uscan compression [2] * modify uscan DEHS report to display component >> state [1] * fix component display during ucan download [3] * create a >> report page somewhere in debian.org website to display which >> components are embedded, in which version and in which package * >> create a "checksum" addon in version to avoid having too long versions >> (see acorn rejection by dak): - target "group": no change >> (1.2.3+~0.0.1+~2.3.1...) - target "ignore": no change - new target >> "checksum": last part of version contains the checksum separate sum of >> version part: if comp1 is 3.4.2 and comp2 is 11.0.3, then version is >> 1.2.3+~ck14.4.5 Some other improvements: * pkg-js-tools installs >> automatically in the good place (/usr/share/nodejs or >> /usr/lib/<arch>>/nodejs * lintian will warn for each module that >> installs something in /usr/lib/nodejs [4] [1]: >> https://salsa.debian.org/debian/devscripts/merge_requests/147 [2]: >> https://salsa.debian.org/debian/devscripts/merge_requests/149 [3]: >> https://salsa.debian.org/debian/devscripts/merge_requests/146 [4]: >> https://salsa.debian.org/lintian/lintian/merge_requests/214 (merged) > > How do we repack components? For example, in node-gulp, tmatch/coverage > should be removed. If I add Files-Exluded: coverage in debian/copyright, > don't it get removed from all components?
No, Files-Excluded is applied only on main. For component1, use "Files-Excluded-component1" -- Pkg-javascript-devel mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
