Source: jquery-throttle-debounce
Version: 1.1+dfsg.1-1.1
Followup-For: Bug #979886

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Control: severity -1 serious
Control: tags -1 +patch

Please fix this issue: UglifyJS v2 is unmaintained since years.

UglifyJS v3 was changed internally by kept most (possibly all) of the
same runtime options.

As a rule of thumb, node-* packages are for Node.js library interfaces,
and packages containing command-line tools implemented in Node.js use
package names with the node- prefix.

Since jquery-throttle-debounce only use the command-line interface of
UglifyJS, provided equally for v2 and v3 branches of the project, the
fix is to simply depend on the package name "uglifyjs" provided by both.

Concretely: Change to build-depend on uglifyjs (not on node-uglify).

NB! I have raised severity of this bugreport, since python3-pytest-cov
depends on this package, causing uglifyjs to transitively be treated as
a so-called "key package" not following common transition processes:
https://udd.debian.org/cgi-bin/key_packages.yaml.cgi

 - Jonas

-----BEGIN PGP SIGNATURE-----
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=5JpY
-----END PGP SIGNATURE-----

Reply via email to