Bug#735769: Drupal7 - minified JavaScript

2014-04-10 Thread Daniel Pocock


Hi Gunnar,

I just saw your comment on this bug from February 18

Personally, I don't think it is enough to say that a package is not
using some artifacts from the source tarball - while it is a technically
valid argument, it would make it far more difficult for FTP masters to
inspect source packages and badness could start to creep in as a
consequence of any generosity they show in this area.

Repackaging upstream tarballs is becoming a common problem with minified
JavaScript, maybe we need to have some automated way of doing this.  For
upstreams who use git and who release the exact contents of their tags
(without any autotools bootstrapping, etc), it should be fairly easy to
create some system on alioth that mirrors all the upstreams and
pro-actively generates +dfsg versions of their tags ready for
maintainers to work with.

Regards,

Daniel


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#735769: Drupal7 - minified JavaScript

2014-04-10 Thread Gunnar Wolf
Daniel Pocock dijo [Thu, Apr 10, 2014 at 12:40:27PM +0200]:
 Hi Gunnar,
 
 I just saw your comment on this bug from February 18
 
 Personally, I don't think it is enough to say that a package is not
 using some artifacts from the source tarball - while it is a technically
 valid argument, it would make it far more difficult for FTP masters to
 inspect source packages and badness could start to creep in as a
 consequence of any generosity they show in this area.
 
 Repackaging upstream tarballs is becoming a common problem with minified
 JavaScript, maybe we need to have some automated way of doing this.  For
 upstreams who use git and who release the exact contents of their tags
 (without any autotools bootstrapping, etc), it should be fairly easy to
 create some system on alioth that mirrors all the upstreams and
 pro-actively generates +dfsg versions of their tags ready for
 maintainers to work with.

Right. This bug was opened before the relevant discussion in d-devel,
and I am also convinced the minified js should be removed from the
source tarball. I have not had time to look into this, and any help
you can give will be appreciated; a simple (or as simple as possible,
at least) repack.sh script should do. Automating this sounds
interesting, but I cannot do more than just say it sounds interesting
right now :(


signature.asc
Description: Digital signature


Bug#735769: Drupal7 - minified JavaScript

2014-04-10 Thread Daniel Pocock
On 10/04/14 14:51, Gunnar Wolf wrote:
 Daniel Pocock dijo [Thu, Apr 10, 2014 at 12:40:27PM +0200]:
 Hi Gunnar,

 I just saw your comment on this bug from February 18

 Personally, I don't think it is enough to say that a package is not
 using some artifacts from the source tarball - while it is a technically
 valid argument, it would make it far more difficult for FTP masters to
 inspect source packages and badness could start to creep in as a
 consequence of any generosity they show in this area.

 Repackaging upstream tarballs is becoming a common problem with minified
 JavaScript, maybe we need to have some automated way of doing this.  For
 upstreams who use git and who release the exact contents of their tags
 (without any autotools bootstrapping, etc), it should be fairly easy to
 create some system on alioth that mirrors all the upstreams and
 pro-actively generates +dfsg versions of their tags ready for
 maintainers to work with.
 Right. This bug was opened before the relevant discussion in d-devel,
 and I am also convinced the minified js should be removed from the
 source tarball. I have not had time to look into this, and any help
 you can give will be appreciated; a simple (or as simple as possible,
 at least) repack.sh script should do. Automating this sounds
 interesting, but I cannot do more than just say it sounds interesting
 right now :(

This automated repacking idea has significant overlap with one of the
GSoC projects:

https://wiki.debian.org/SummerOfCode2014/StudentApplications#Recursively_building_Java_dependencies_from_source

Whether the embedded artifacts are called *.jar or *.min.js, the same
script could probably help


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#735769: Drupal7 - minified JavaScript

2014-04-10 Thread Gunnar Wolf
FWIW, this list might prove useful, and also point at libraries not
yet packaged:

   drupal7$ for js in $(find . -name *.min.js); do
js=$(basename $js)
echo -n $js ⇒ 
found=$(apt-file search $js|cut -f 1 -d :|grep -v ^drupal7)
if [ -z $found ]; then
nonmin=$(apt-file search ${js/.min/}|cut -f 1 -d :); 
if [ -z $nonmin ]; then 
echo NOT PACKAGED; 
else
echo $nonmin (NON MINIMIZED); 
fi
else
echo $found
fi
done
   jquery.ui.position.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.slide.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.autocomplete.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.core.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.clip.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.effects.highlight.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.effects.core.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.effects.explode.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.tabs.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.progressbar.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.shake.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.draggable.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.droppable.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.accordion.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.scale.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.datepicker.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.dialog.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.drop.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.effects.blind.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.resizable.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.bounce.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.effects.transfer.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.effects.pulsate.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.mouse.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.slider.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.selectable.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.fade.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.button.min.js ⇒ libjs-jquery-ui wordpress
   jquery.ui.sortable.min.js ⇒ libjs-jquery-ui wordpress
   jquery.effects.fold.min.js ⇒ mediawiki (NON MINIMIZED)
   jquery.ui.widget.min.js ⇒ libjs-jquery-ui wordpress

So,

• Wordpress has at least the same duplication Drupal7 has WRT
  libjs-jquery-ui (which should be the canonical source for .min.js
  files)

• Many of the files we need are provided by Mediawiki. Should they
  rather be split?

• Of course, it's not just a matter of finding the right filename, but
  ensuring they are compatible and do not produce regressions :-/
  Something that Javascript has a bad fame about...


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org