On Tue, 17 Jun 2025 at 20:45, Simon McVittie <s...@debian.org> wrote: > > On Tue, 17 Jun 2025 at 12:10:44 +0100, Luca Boccassi wrote: > >I am not really sure why dbus-broker is marked as a 'key package', as > >it's a completely optional, non-default, alternative implementation. > > https://udd.debian.org/cgi-bin/key_packages.yaml.cgi says: > > - reason: at-spi2-core build-depends dbus-broker > source: dbus-broker > > presumably because it uses dbus-broker during build-time tests? > (It doesn't seem to have a runtime dependency.) > > This might not be the only reason, that script stops after it finds any > single reason to treat a package as key.
It looks like it manually launches separate buses so it forks directly new brokers or daemons: https://sources.debian.org/src/at-spi2-core/2.56.2-1/bus/README.md/ So it uses find_program() at build time: https://sources.debian.org/src/at-spi2-core/2.56.2-1/bus/meson.build/?hl=72#L72 That last part seems strange and unnecessary, but it explains the build dependency - oh well
