Package: ftp.debian.org
Severity: normal
Hi,
yui3 was uploaded in 2012 and never maintained since except one NMU by
security team. I wrote a mail 1 year ago o the bazaar team which has the
only one reverse dep (loggerhead), without any response [4].
yui3 has DFSG problem and should not stay as this in Debian archive
(#788319).
Here is the mail content that resumes other problems with this package:
> yui3 package has many problems:
> - Debian problems:
>* RC/DFSG bug (#788319)
>* never updated since old-old-stable (except a Security Team change)
>* not released in stable, neither old-stable
>* debian/watch points to a site now redirected to a GitHub repo that
> builds a "yui" library [1]
> - Consistency problems:
>* "yui" npmjs package points to [1]
>* "yui" npm module is "YUI 3: The Yahoo User Interface Library"
>* our packages are named libjs*yui3*
>* "yui3" npmjs package points to [2] with a very different content
> than our
>* [2] is a fork of [3]
>* [1] seems unmaintained for 5 years
>* [2] seems unmaintained for 8 years
>* [3] seems unmaintained for 7 years
>
> yui3 is a reverse dependency of loggerhead:
> * maintained by Bazaar Team
> * not in stable, neither in testing (blocked by yui3 of course)
>
> loggerhead has no reverse dependencies
>
> So my question are:
> * Does Bazaar Team wanted to maintain loggerhead in Debian?
>=> if no, please ROM-RM to permits our ROM-RM of yui3
>=> if yes, does Bazaar Team want to maintain yui3 by itself?
> * if yes, please go ahead
> * if no:
> - which yui repo is the good dependency of loggerhead
> - does JS Team want to clean and maintain this?
> (yadd advice is "**no**")
>
> [1]: https://github.com/yui/yui3
> [2]: https://github.com/davglass/nodejs-yui3
> [3]: https://github.com/yui/nodejs-yui3
[4]:
https://alioth-lists.debian.net/pipermail/pkg-javascript-devel/2019-August/034865.html
