Bug#638693: serna-free: Embeds ant, avalon-framework, batik, fop, icu4j, xalan and possibly other java libraries

2011-08-21 Thread Niels Thykier 
Package: serna-free
Severity: important

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

Lintian outputs[1]:


jar-not-in-usr-share:
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/avalon-framework-cvs-20020806.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/batik.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/dost.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/fop.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/icu4j.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/resolver.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/xalan.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/xercesImpl.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/lib/xml-apis.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-antlr.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-apache-bsf.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-apache-log4j.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-apache-oro.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-apache-regexp.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-apache-resolver.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-commons-logging.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-commons-net.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-icontract.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-javamail.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-jdepend.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-jmf.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-jsch.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-junit.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-launcher.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-netrexx.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-nodeps.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-starteam.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-stylebook.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-swing.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-trax.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-vaj.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-weblogic.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-xalan1.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant-xslp.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/ant.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/dost.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/log4j-1.2.11.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/resolver.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/xercesImpl.jar
usr/lib/serna/plugins/dita/DITA-OT1.4/tools/ant/lib/xml-apis.jar


Manually checking the package, I find you use 11MB worth of java
libraries, which are all in the archive[2].


$ du -sh serna/usr/lib/serna/plugins/dita/DITA-OT1.4/{ant,lib}
64K serna/usr/lib/serna/plugins/dita/DITA-OT1.4/ant
11M serna/usr/lib/serna/plugins/dita/DITA-OT1.4/lib


I also noted debian/3rd/antlr-2.7.1.tar.gz, which very much smells
like an embedded copy of antlr (2.7.7 is in the archive).  I did not
bother tracking it down though, so it may just be waste in the
source package.

I am filing this as important, but I did consider using serious due
to the extend this is done.

~Niels

[1] (on lintian.d.o: 
http://lintian.debian.org/maintainer/nome...@debian.org.html#serna-free)

[2] Perhaps not at that right version and your upstream may have
modified their copies of these libraries.

- -- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.0.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAEBCAAGBQJOUJ9bAAoJEAVLu599gGRC3D0QAI7vkbdyZexvhXq2VjtUS6A9
D1D5rQAfioMsjgRc9gTk9DGkM6BSe9JP8O+OeHB3G6LG2OORytm0zqiyfxMXonzg
PKdoF7q7PCnL41Lxyld3LxvqPFGDhy2rU+MfknEIb+zdyj5/UNccLh5pwmYsOEMb
Yr/PwPao9Z5mHTl8N2mT30upJjo7iYfTQ1JmOf573nzRdlFSBOhASrgUD3zAOyIy
I1qt4jIS3WX/I2CwdlImiM0RYVxGE+AalfCttbdWjHUSFNuuydelXG3DUYt4ODXA
xubX8zLrXxCY/V729KaOkv3uzveOKIGZoPaQz7C55gd/QtTq+m1ioWxsGLMC0vxx
1iP8EvlAE1G+FQoj99xV2uQTk7oqgWtbyAFiVaGYNZ+WhLDuwnN5/Chv/dmOPH8z
ZRTGxK2glLgMPBR6W8V6xIwaVM3FlCldNYJO/yLu90nqGSZGvkvFX26muOzBFJ+/
XnX6hiD+MYKKkG6Jagbx9fddT7iYUcRnz3x6IBatWDEnYx30BKN4QgoF3HiIFocI
CRyUIJ3jz9YzfLXGFsi3E/pVqQcA2p/nFPgOY5fM/sGx+ICx6hdnt2Sro3JEdVe1
7QW2EfGlmyuOp85p8sbBeIiSK2bPZOjX88489W2QZbJX4gD6WIT+Qj4CV8pWpS+z
N/ihjAnfv3fqpC9LYqae
=GEdp
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble?

Bug#638693: serna-free: Embeds ant, avalon-framework, batik, fop, icu4j, xalan and possibly other java libraries

2011-08-21 Thread Joachim Breitner 
Dear Niels,


 Manually checking the package, I find you use 11MB worth of java
 libraries, which are all in the archive[2].

thanks for filing this report.

I (and probably also Mathieu Malaterre, the current de-facto maintainer)
are aware of these issues, but there are worse things not in order with
the package (a strange crash, possibly stemming from using the system
aspell library) and a still unclear upstream maintenance and
responsiveness. These should be resolved before investing the time to
check the convenience bundles for patches (which exist) and whether they
can be dropped or upstreamed.

The branch on
http://git.nomeata.de/?p=serna.git;a=shortlog;h=refs/heads/syspkg-antlr
is an unfinished attempt to use the system antlr library.

Greetings,
Joachim

-- 
Joachim nomeata Breitner
Debian Developer
  nome...@debian.org | ICQ# 74513189 | GPG-Keyid: 4743206C
  JID: nome...@joachim-breitner.de | http://people.debian.org/~nomeata


signature.asc
Description: This is a digitally signed message part