Public bug reported:

1. Availability: i386, amd64
<http://archive.ubuntu.com/ubuntu/pool/universe/s/serf/>.

2. Rationale: serf is a new build-dependency of subversion 1.6.3 and
1.6.4 in Debian; subversion 1.6.1 is in Ubuntu main.  In order to merge
subversion 1.6.4 (LP bug #406245), we will either need to promote serf
or add further Ubuntu-specific changes to subversion.  Since Subversion
upstream is considering changing the default HTTP client library from
neon to serf (because it supports pipelined requests and multiple
concurrent connections for better performance), it seems best for
Ubuntu’s subversion to include both the neon and serf backends, like
Debian’s.

3. Security: No CVE entries <http://cve.mitre.org/cgi-
bin/cvekey.cgi?keyword=serf>, no Secunia history
<http://secunia.com/search/?search=serf>, no setuid binaries, no network
servers.  serf is an HTTP client library.

4. Quality assurance: The package requires no configuration.  The last
upload by the Debian serf maintainer was a year ago, but there were two
NMUs last month by the Debian subversion maintainer.  The only open
Debian bug report is an unconfirmed FTBFS of an old version (which isn’t
too concerning given that the package has already built in Karmic).
Upstream <http://code.google.com/p/serf/> has regular Subversion commits
(many per week), and has 9 open bugs (out of 49) that don’t look
particularly notable.  There is a test suite that runs successfully at
build.

5. UI standards: This is a library, not a user-facing application.

6. Standards compliance: There are 6 lintian warnings that look pretty
minor <http://packages.qa.debian.org/s/serf.html>.  It is packaged using
CDBS and all Debian patches are applied with quilt.  The two binary
packages, libserf-0-0 and libserf-0-0-dev, install a library and
corresponding development files to standard locations as you’d expect.

7. Dependencies: All dependencies and build-dependencies are in main
(apr, apr-util, openssl, eglibc, zlib, cdbs, debhelper, quilt,
autotools-dev).

8. Maintenance: This package is infrequently updated in Debian and is
not likely to require any additional attention from Ubuntu.

9. Background information: Nothing notable beyond debian/control.

10. Internationalization: This is not a graphical application and does
not require translation.

** Affects: serf (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Promote serf from universe to main
https://bugs.launchpad.net/bugs/410624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to