Hello,

For django-ajax-selects in git[1] I am getting the following errors and
warnings:

E: django-ajax-selects source: source-is-missing 
ajax_select/static/ajax_select/js/bootstrap.js
W: python3-ajax-select: extra-license-file 
usr/lib/python3/dist-packages/ajax_select/LICENSE.txt
W: python3-ajax-select: image-file-in-usr-lib 
usr/lib/python3/dist-packages/ajax_select/static/ajax_select/images/loading-indicator.gif
E: python3-ajax-select: privacy-breach-uses-embedded-file 
usr/lib/python3/dist-packages/ajax_select/static/ajax_select/js/bootstrap.js 
You may use libjs-jquery-ui package. 
(//code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css)
E: python3-ajax-select: privacy-breach-uses-embedded-file 
usr/lib/python3/dist-packages/ajax_select/static/ajax_select/js/bootstrap.js 
You may use libjs-jquery package. 
(//ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js)
W: python-ajax-select: image-file-in-usr-lib 
usr/lib/python2.7/dist-packages/ajax_select/static/ajax_select/images/loading-indicator.gif
E: python-ajax-select: privacy-breach-uses-embedded-file 
usr/lib/python2.7/dist-packages/ajax_select/static/ajax_select/js/bootstrap.js 
You may use libjs-jquery-ui package. 
(//code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css)
E: python-ajax-select: privacy-breach-uses-embedded-file 
usr/lib/python2.7/dist-packages/ajax_select/static/ajax_select/js/bootstrap.js 
You may use libjs-jquery package. 
(//ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js)

To me it looks like I should override some of these.

source-is-missing - this is false, this is the source file, I believe it
was written by hand. It has some long lines. See below, I pasted it into
this message.

extra-license-file - at quick glace this warning is correct, and should
get fixed.

image-file-in-usr-lib - do we really care about this? For Django apps it
is common practise to put static files under the Python directory like
this. That means they go under /usr/lib. It is not really possible to
change this without a lot of extra complexity using a -common package
and symlinks. For one small file, not convinced it is worth it.

privacy-breach-uses-embedded-file - this is only correct if used by an
application that does not import jquery symbols itself. If the
application already has loaded jquery and jquery-ui from, say a local
source, I believe there is no privacy issue:

// load jquery and jquery-ui if needed
// into window.jQuery
if (typeof window.jQuery === 'undefined') {
  document.write('<script type="text/javascript"  
src="//ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js"><\/script><script
 type="text/javascript"  
src="//code.jquery.com/ui/1.10.3/jquery-ui.js"><\/script><link type="text/css" 
rel="stylesheet" 
href="//code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css" />');
} else if(typeof window.jQuery.ui === 'undefined' || typeof 
window.jQuery.ui.autocomplete === 'undefined') {
  document.write('<script type="text/javascript"  
src="//code.jquery.com/ui/1.10.3/jquery-ui.js"><\/script><link type="text/css" 
rel="stylesheet" 
href="//code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css" />');
}

I could simply remove the contents of this file if required, that kind
of seems silly however, and could break compatability with upstream for
local non-Debian projects. Is it ok if I add an override?

Thanks

Notes:
[1] git://anonscm.debian.org/python-modules/packages/django-ajax-selects.git
-- 
Brian May <b...@debian.org>

Reply via email to