Re: [Pkg-javascript-devel] Comments regarding node-node-localstorage_1.3.0-2_amd64.changes

2018-02-22 Thread Daniel Kahn Gillmor
On Thu 2018-02-22 10:38:42 +, Chris Lamb wrote: > Might be worth using "Laurence (Larry) Maccherone" - this alternative/nickname > can be somewhat Western-centric. Thanks for the pointer. the author identifies themselves once as Lawrence (not "Laurence") S. Maccherone, Jr in README.md,

Re: [Pkg-javascript-devel] Bug#734101: libjs-jquery-mobile: New Release

2018-02-04 Thread Daniel Kahn Gillmor
On Fri 2014-01-03 14:04:26 -0600, in https://bugs.debian.org/734101 Charlie Smotherman wrote: > Package: libjs-jquery-mobile > Version: 1.2.0+dfsg-2 > Severity: wishlist What's going on with libjs-jquery-mobile? It would be really good for debian to ship an up-to-date version of

Re: [Pkg-javascript-devel] npm2deb, OpenPGP.js, and dependency management [was: Re: Looking for help Re: Bug#787774]

2018-02-01 Thread Daniel Kahn Gillmor
On Thu 2018-02-01 21:41:48 +0530, Pirate Praveen wrote: > You can request access to the team. done, if anyone can grant it i'd appreciate it. my account is "dkg". > I have replied to your ITP about grunt. Yes, many of this can be > ignored. You will need to replace browserify with webpack. i

[Pkg-javascript-devel] Looking for help Re: Bug#787774: RFP: libjs-openpgp -- OpenPGP JavaScript Implementation (OpenPGP.js)

2018-01-31 Thread Daniel Kahn Gillmor
Over on https://bugs.debian.org/787774, On Fri 2015-06-05 00:43:14 +0200, W. Martin Borgert wrote: > Package: wnpp > Severity: wishlist > > Package name: libjs-openpgp > Version : v0.10.1 > Upstream Author : OpenPGP Development Team > URL :

Re: [Pkg-javascript-devel] #743404 RFP: eslint -- tool for static analysis of ECMAScript (JavaScript™) code

2016-01-25 Thread Daniel Kahn Gillmor
Hi debian javascript maintainers-- in https://bugs.debian.org/743404, Ben Finney wrote: > Package: wnpp > Severity: wishlist > > * Package name: eslint > Version : 0.4.5 > Upstream Author : Nicholas C. Zakas > * URL

[Pkg-javascript-devel] [Launchpad Feedback #50206] RE: Launchpad: Claim existing team

2015-01-23 Thread Daniel Kahn Gillmor
Hi Valentin-- On Fri 2015-01-23 16:40:46 -0500, valentin OVD wrote: It's me who have claimed the team for prevent this to happen. Thanks for clarifying, i have indeed seen you posting on the mailing list since March 2014. Administrators of Pkg-javascript please reclaimed the launchpad team.

Re: [Pkg-javascript-devel] Launchpad: Claim existing team

2015-01-23 Thread Daniel Kahn Gillmor
On Fri 2015-01-23 15:17:19 -0500, Launchpad wrote: vovd (vovd) tried to claim the Launchpad team named Debian Javascript Maintainers (pkg-javascript-devel-lists) (which is associated with pkg-javascript-devel@lists.alioth.debian.org). To finish claiming that team, making vovd (vovd) its

Re: [Pkg-javascript-devel] JS policy: repackaging upstream tarball when minified js files are present (was: Call for review: should.js packages)

2014-05-05 Thread Daniel Kahn Gillmor
On 05/05/2014 06:16 AM, Emilien Klein wrote: It's not about being more strict. It's about explicitly mentioning a requirement that is not clear to a number of our co-packagers. FWIW, if the exclusions in debian/copyright (those mentioned on the wiki) interact properly with uscan, and if the

Re: [Pkg-javascript-devel] JS policy: repackaging upstream tarball when minified js files are present (was: Call for review: should.js packages)

2014-05-04 Thread Daniel Kahn Gillmor
On 05/04/2014 05:31 PM, Emilien Klein wrote: No other comments from the team on Jérémy's proposal? If the upstream tarball has both the original and minified javascript, I don't think we need to actively re-pack the upstream tarball to get rid of the minified javascript, any more than we need to

[Pkg-javascript-devel] Bug#722490: Bug#722490: src:pegjs: please relax debhelper compatibility level to ease backporting

2013-09-11 Thread Daniel Kahn Gillmor
On 09/11/2013 11:52 AM, Jonas Smedegaard wrote: pegjs source package seems to do no extraordinary packaging tricks, yet uses debhelper compatibility level 9, making backporting to stable or oldstable harder, as it then involves also backporting debhelper (or relying on other backporting of

[Pkg-javascript-devel] Debian font URLs [was: Re: Debian javascript URLs]

2013-08-21 Thread Daniel Kahn Gillmor
i'm hijacking this corner of a javascript discussion over to the debian fonts team because i think they should be aware of it as well. pkg-fonts folks, this is a continuation of a javascript discussion about coordinating default data URL locations between fedora and debian default HTTPd

Re: [Pkg-javascript-devel] Debian javascript URLs

2013-08-21 Thread Daniel Kahn Gillmor
sorry to be late to the discussion! I quite like the idea that we can make it easy for web site administrators who use debian (and fedora!) to avoid the evil CDNs for their standard javascript. On 08/15/2013 08:40 PM, T.C. Hollingsworth wrote: There's nothing wrong with it, I just think we

[Pkg-javascript-devel] Bug#495178: Bug#495178: Bug#495178: (no subject)

2013-07-30 Thread Daniel Kahn Gillmor
On 07/30/2013 03:36 PM, Jonas Smedegaard wrote: Quoting Thomas Bechtold (2013-07-30 19:47:10) forgot to describe the attached debdiff. The patch adds a Build-Depends to yui-compressor and generates jquery.min.js. That's it. I recommend against using a different and inferior compressor

[Pkg-javascript-devel] backporting jquery-timepicker

2013-07-18 Thread Daniel Kahn Gillmor
hi folks-- i'm planning on backporting jquery-timepicker 1.2 (which is in jessie) to wheezy-backports. Please let me know if you have any concerns! I'm the maintainer (under the aegis of the pkg-javascript team, cc'ed here) for this package in the regular archive as well. Regards,

[Pkg-javascript-devel] Bug#715325: Bug#715325: npm: leaves lots of stuff in /tmp

2013-07-10 Thread Daniel Kahn Gillmor
On 07/10/2013 12:11 PM, Jérémy Lal wrote: The security issue is fixed there : https://github.com/isaacs/npm/commit/f4d31693 this will eventually come to npm debian package. Thanks for the followup on this, jérémy! I confess i'm kind of amazed that node doesn't have any primitive like

[Pkg-javascript-devel] Bug#715325: [oss-security] npm uses predictable temporary filenames when unpacking tarballs

2013-07-10 Thread Daniel Kahn Gillmor
On 07/10/2013 04:02 PM, Daniel Kahn Gillmor wrote: hi oss-sec folks-- i recently learned that npm, the node.js language-specific package manager, created predictable temporary directory names in a world-writable filesystem (/tmp) by default when unpacking archives. It looks like

[Pkg-javascript-devel] Bug#715325: Bug#715325: Bug#715325: npm: leaves lots of stuff in /tmp

2013-07-08 Thread Daniel Kahn Gillmor
On 07/08/2013 03:33 AM, Jérémy Lal wrote: On 08/07/2013 05:08, Shawn Landden wrote: I installed a few packages yesterday, and today realized npm was wasting 50M of my ram with copies of what it downloaded still in /tmp/npm-# folders I haven't tried to reproduce this yet, but it sounds to me

[Pkg-javascript-devel] Bug#715325: Bug#715325: Bug#715325: npm: leaves lots of stuff in /tmp

2013-07-08 Thread Daniel Kahn Gillmor
On 07/08/2013 07:55 AM, Jérémy Lal wrote: I am curious about how `npm install mymodule` could be a target for an attacker, especially considering the temp directory is used only once (at (un)tar times). if the tmpdir is predictably-named (e.g. it is /tmp/npm-$PID), then an attacker could

Re: [Pkg-javascript-devel] packaging libjs-jquery*

2013-05-31 Thread Daniel Kahn Gillmor
Hi M.Tornow-- On 05/31/2013 04:16 AM, tor...@riseup.net wrote: I try to learn packaging for Debian in a group which wants to package diaspora for debian. great, thanks! I downloaded apt-get source libjs-jquery-fancybook to get a template, but to my surprise it gave me jquery-goodies-8.

Re: [Pkg-javascript-devel] documentation about distributing minified versions of files

2013-05-09 Thread Daniel Kahn Gillmor
On 05/08/2013 07:29 AM, Jérémy Lal wrote: There are two different needs : 1) packaged webapp that depends on libjs-* package 2) user project that depends on libjs-* package. For 1) your suggestion would work, but it wouldn't for 2). Why not? I don't see what problems it causes for

Re: [Pkg-javascript-devel] documentation about distributing minified versions of files

2013-05-07 Thread Daniel Kahn Gillmor
On 05/06/2013 02:21 PM, Jérémy Lal wrote: Daniel you ask me to explain some things i thought was common practice. Below i try to give explanations ; please help me fix, refine, or reject them. thanks, i think it's useful to establish documentation of common practice, along with the rationales

[Pkg-javascript-devel] libjs-jquery-timepicker (http://bugs.debian.org/693884)

2013-03-26 Thread Daniel Kahn Gillmor
hi debian javascript folks-- I'm about to try to take on #693884 to package Trent Richardson's jQuery UI timepicker addon. i've just subscribed to the javascript maintainers team, and i'm afraid i don't have the time to help out with other js packages, but i would be happy to include this new

Re: [Pkg-javascript-devel] Request to Join Project Debian JavaScript Maintainers from Daniel Kahn Gillmor (dkg)

2013-03-26 Thread Daniel Kahn Gillmor
On 03/26/2013 02:18 PM, Marcelo Jorge Vieira wrote: On Tue, 2013-03-26 at 17:19 +, [dkg] wrote: [...] have just subscribed to pkg-javascript-devel@lists.alioth.debian.org Have you subscribed to our mailinglist already?