On 08/12/2021 11:47, Daniel Ring wrote:
On 12/8/2021 1:38 AM, Jonas Smedegaard wrote:
If older package releases embedded the full source for Modernizr then I
agree that it should be acceptable (even if not ideal), but if only
bundling a generated build of Modernizr then it is a severe violation of
Debian Copyright and must be corrected.
Debian provides a package libjs-modernizr with _some_ Modernizr build.
Since Modernizr is mostly about providing fallbacks for older browsers,
you might consider using the generic build and documenting in the
package README.Debian which fallbacks are skipped and will need fetching
which custom-profile build of Modernizr for which ancient browsers.
The embedded Modernizr is source-only (though not a complete copy of the
source, it only includes a few feature tests). The Debian version
doesn't have any of the feature tests in the embedded version.
However, we're in luck; I checked which tests Rainloop was using and
discovered that it doesn't use the library at all anymore, so I removed
it. Looks like upstream just forgot to remove their vendored copy.
With that, the only bundled libraries remaining in Rainloop are
source-only copies not already packaged in Debian.
Except bootstrap (old 2.x version)
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
