Bug#970717: kubernetes: abuse of "embedded code copies" | hundreds of vendored libraries

2020-09-22 Thread Dmitry Smirnov
> It's not entirely clear to me if the policy concerns are around > licensing compliance or simply the volume of vendored dependencies. The concern is entirely about volume of vendored dependencies. Most certainly no other package in Debian ever had that many private copies of 3rd party librarie

Bug#970717: kubernetes: abuse of "embedded code copies" | hundreds of vendored libraries

2020-09-22 Thread Janos LENART
Hi Elana, Thank you for looking into this. I've believed the vendor/ directory is thoroughly vetted, and I have also checked every single directory, sometimes even files. I do not think there is a DFSG issue here. Dmitry does not agree with the fact that vendor/ is boundled in the Debian packages

Bug#970717: kubernetes: abuse of "embedded code copies" | hundreds of vendored libraries

2020-09-22 Thread Elana Hashman
On Tue, Sep 22, 2020 at 08:56:25PM +1000, Dmitry Smirnov wrote: > > As discussed in debian-devel, Kubernetes package abuses Debian practices > and Golang team policies by needlessly vendoring hundreds(!) of libraries, > most of which are available in Debian. > > For a complex package like Kubern

Bug#970717: kubernetes: abuse of "embedded code copies" | hundreds of vendored libraries

2020-09-22 Thread Dmitry Smirnov
Source: kubernetes Version: 1.17.4-1 Severity: serious X-Debbugs-CC: debian-c...@lists.debian.org As discussed in debian-devel [1], Kubernetes package abuses Debian practices and Golang team policies by needlessly vendoring hundreds(!) of libraries, most of which are available in Debian. For a c