Package: lintian Version: 2.5.84 Severity: important Tags: security X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org X-Debbugs-CC: ftpmas...@ftp-master.debian.org
Hi, source-contains-prebuilt-wasm-binary source tag is not emitted due to too old file. wasm is a crap over a crap of nodejs communauty. It is compiled javascript. Node often include it without source and this will end in the archive. Why js file even minified an human could with some hard work undestand security implication. With wasm, it is near impossible to understand. So it is important to be sure that wasm file are compiled from source (thus security bug), and maybe should raise an ftpmaster autoreject. So could we try to get file on lintian.debian.org to detect wasm ? Bastien
