Public bug reported:

[Availability]
The package is in Ubuntu Universe and builds for amd64, arm64, armhf, i386, 
ppc64el, s390x:
http://launchpad.net/ubuntu/+source/glewlwyd

Just fonts-glewlwyd is needed in main.


[Rationale]
This is part of the MIR activity for all dependencies of mailman3
The "main" MIR of it is at bug 1775427:

Mailman (2) has only python2 support, but we strive for python3,
therefore Mailman3 which has python3 support should be promoted to main.


[Security]
There are no CVEs for glewlwyd:
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=glewlwyd
The Ubuntu CVE tracker at 
http://people.ubuntu.com/~ubuntu-security/cve/universe.html
is also empty.

[Quality assurance]

As part of the mailman3 stacks as of now (Disco) this installs fine and works 
fine.
On itself it is useful to (many) other dependencies and does not need a post 
install configuration on its own.

- no debconf questions
- upstream has 3 open issues, and 28 closed ones:
  https://github.com/babelouest/glewlwyd/issues
- last one was filed over a year ago, in 2018
- last commit was in December 2018
- there is one Ubuntu bug, filed via apport:
  https://bugs.launchpad.net/ubuntu/+source/glewlwyd/+bug/1807768
- there is one bug in debian, requesting a translation:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906944

Debian tracker: https://tracker.debian.org/pkg/glewlwyd
- 3 lintian warnings, all about embedded js library
  
(https://lintian.debian.org/maintainer/[email protected]#glewlwyd).
  These do not affect the binary package this MIR is about.
- debian seems to be keeping up-to-date with upstream releases

Tests
- no DEP8 tests
- test suite is NOT run at package build time. d/changelog has no mention of
  "test". the README.md
  (https://github.com/babelouest/glewlwyd/blob/master/test/README.md) says that
  some preparation is necessary, like installing a "check" package, and running
  a test server on localhost.

debian/watch
- available and working

lintian
- -I --pedantic output:
ubuntu@disco:~/deb/glewlwyd/glewlwyd-1.4.9$ lintian -I --pedantic
E: glewlwyd changes: bad-distribution-in-changes-file unstable
P: glewlwyd source: source-contains-browserified-javascript 
debian/missing-sources/react-bootstrap.js code fragment:(function 
webpackuniversalmoduledefinition(root, factory) { if(typeof exports === 'obje
P: glewlwyd source: source-contains-browserified-javascript 
webapp/js/react-bootstrap.js code fragment:(function 
webpackuniversalmoduledefinition(root, factory) { if(typeof exports === 'obje
I: glewlwyd source: testsuite-autopkgtest-missing
I: glewlwyd source: unused-override source-is-missing
I: fonts-glewlwyd: font-outside-font-dir 
usr/share/glewlwyd/webapp/fonts/fontawesome-webfont.woff
I: fonts-glewlwyd: font-outside-font-dir 
usr/share/glewlwyd/webapp/fonts/fontawesome-webfont.woff2
I: fonts-glewlwyd: font-outside-font-dir 
usr/share/glewlwyd/webapp/fonts/glyphicons-halflings-regular.eot
I: fonts-glewlwyd: font-outside-font-dir ... use --no-tag-display-limit to see 
all (or pipe to a file/program)
W: glewlwyd-common: embedded-javascript-library 
usr/share/glewlwyd/webapp/js/bootstrap.js please use libjs-twitter-bootstrap
W: glewlwyd-common: embedded-javascript-library 
usr/share/glewlwyd/webapp/js/jquery-3.1.1.js please use libjs-jquery
W: glewlwyd-common: embedded-javascript-library 
usr/share/glewlwyd/webapp/js/jquery-3.1.1.min.js please use libjs-jquery
N: 0 tags overridden; 1 unused override

Keeping in mind that only fonts-gleqlwyd is of concern for this MIR,
fonts-outside-font-dir are the only issues.

Reliance on obsolete or about to be demoted packages
- the package build-depends on dh-exec, which is looking for a new maintainer
  in Debian (https://bugs.debian.org/851746)
- there are no py2 or gtk2 dependencies

[UI standards]
The package has PO templates and translations, although they are probably of no
concern for the binary package this MIR is interested in (fonts-glewlwyd).

[Dependencies]
Some dependencies are not in main, but we drive MIR for all related packages
that are not in main at the same time.
Please check the list of bugs from the main Mailman3 MIR in bug 1775427 to get 
an overview.

[Standards compliance]
The odd lintian violation seems to be the directory where fonts are installed:
I: fonts-glewlwyd: font-outside-font-dir 
usr/share/glewlwyd/webapp/fonts/fontawesome-webfont.woff
N:
N:    This package contains a TrueType, OpenType, or Type 1 fonts, but the
N:    package does not install this file under /usr/share/fonts/.
N:
N:    Refer to https://wiki.debian.org/Fonts/PackagingPolicy for details.
N:
N:    Severity: wishlist, Certainty: possible

I did an apt-file search for .woff2 and .woff, and the results show that many
packages install these fonts in /usr/share/<pkg> directories.
Nothing else jumps out.

[Maintenance]
The Server team will subscribe for the package for maintenance, but in
general it seems low on updates and currently is a sync from Debian.

[Background]
None at this time.

** Affects: glewlwyd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1820195

Title:
  [MIR] glewlwyd as dependency of mailman3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/glewlwyd/+bug/1820195/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to