Package: exaile
Version: 0.3.2.0-0.1
Severity: important
Usertags: embedded-code-copy
Justification: violation of Debian Policy 4.13

Hi there.

It seem that exaile includes an embedded convenience copy of a python
module (simplejson) that is already in the archive. The Debian Policy
explicitly discourages this. [0]

Furthermore, the package can be made smaller (smaller downloads, smaller
installations---important for live CDs) and more secure without this
embedded copy.

Please, feel free to tweak the severity of this bug. BTW, thanks for this
very welcome upload: at least we got a version of exaile that is not
bit-rotting.


Regards, Rogério Brito.

[0]: http://www.debian.org/doc/debian-policy/ch-source.html#s-embeddedfiles

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (50, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.36 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.utf-8, LC_CTYPE=pt_BR.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages exaile depends on:
ii  gstreamer0. 0.10.30.4-1                  GStreamer plugin for ALSA
ii  gstreamer0. 0.10.30.4-1                  GStreamer plugins from the "base" 
ii  gstreamer0. 0.10.25.4-1                  GStreamer plugins from the "good" 
ii  libgstreame 0.10.30.4-1                  Core GStreamer libraries and eleme
ii  libjs-proto 1.6.1-1                      JavaScript Framework for dynamic w
ii  python      2.6.6-5                      interactive high-level object-orie
ii  python-dbus 0.83.1-1                     simple interprocess messaging syst
ii  python-feed 4.1-14                       Universal Feed Parser for Python
ii  python-glad 2.17.0-4                     GTK+ bindings: Glade support
ii  python-gst0 0.10.19-2                    generic media-playing framework (P
ii  python-gtk2 2.17.0-4                     Python bindings for the GTK+ widge
ii  python-mmke 1.6.2.1-3                    Multimedia key support as a PyGTK 
ii  python-muta 1.20.0.99-0~rev98~ppa1~lucid audio metadata editing library
ii  python-pysq 2.6.0-1                      Python interface to SQLite 3
ii  python-pyvo 1.4-2+b1                     Python interface to the Ogg Vorbis
ii  python-supp 1.0.12                       automated rebuilding support for P

Versions of packages exaile recommends:
ii  gstreamer0.10-plugins-ugly    0.10.16-2  GStreamer plugins from the "ugly" 
pn  python-cddb                   <none>     (no description available)
ii  python-eggtrayicon            2.25.3-6   Python module to display icons in 
pn  python-gamin                  <none>     (no description available)
pn  python-gpod                   <none>     (no description available)
ii  python-gtkmozembed            2.25.3-6   Python bindings for the GtkMozEmbe
ii  python-notify                 0.1.1-2+b2 Python bindings for libnotify
pn  streamripper                  <none>     (no description available)

exaile suggests no packages.

-- no debconf information

-- 
Rogério Brito : rbr...@{ime.usp.br,gmail.com} : GPG key 4096R/BCFCAAAA
http://rb.doesntexist.org : Packages for LaTeX : algorithms.berlios.de
DebianQA: http://qa.debian.org/developer.php?login=rbrito%40ime.usp.br



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to