Bug#908194: ITP: ukui-greeter -- lightdm greeter for UKUI
Package: wnpp Severity: wishlist Owner: handsome_feng * Package name: ukui-greeter Version : 1.1.4 Upstream Author : yanghao * URL : https://salsa.debian.org/kylin-team/ukui-greeter * License : GPL-2+ Programming Lang: C++ Description : lightdm greeter for UKUI A greeter for UKUI desktop environment written by Qt5. The greeter supports biometric authentication which is provided by biometric-authentication service. This package will be maintained by the Kylin Team.
Bug#908197: ITP: biometric-authentication -- Biometric Authentication Service
Package: wnpp Severity: wishlist Owner: handsome_feng * Package name: biometric-authentication Version : 0.9.55 Upstream Author : jianglin...@kylinos.cn * URL : https://salsa.debian.org/kylin-team/biometric- authentication * License : LGPL-3+ Programming Lang: C Description : Biometric Authentication Service A biometric identification framework. Provide unified DBus interface for application layer, used for various biometric identification and authentication. The framework is divided into three layers: service layer, core layer and drive layer. And this package will be maintained by the Kylin team.
Bug#908208: ITP: node-topo -- Topological sorting with grouping support
Package: wnpp Severity: wishlist Owner: ro...@debian.org X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-topo Version : 3.0.0 Upstream Author : [Devin Ivy](https://github.com/devinivy) * URL : https://github.com/hapijs/topo#readme * License : BSD-3-Clause Programming Lang: JavaScript Description : Topological sorting with grouping support This package allows one to create containers for topologically sorting a list of nodes withnon-circular interdependencies. . In the field of computer science, a topological sort or topological ordering of a directed graph is a linear ordering of its vertices such that for every directed edge uv from vertex u to vertex v, u comes before v in the ordering. . Node.js is an event-based server-side JavaScript engine.
Re: Browserified copy and DFSG
On Thu, Sep 6, 2018 at 10:41 PM Sean Whitton wrote: > > Hello, > > On Wed 05 Sep 2018 at 04:38PM +0200, Bastien ROUCARIES wrote: > > >> AFAIUI, Built-Using is solely to be used for compliance with licenses > >> (GPL or GPL-like licenses). Are these node modules under GPL or a > >> GPL-like license? If not, there should be no need for Built-Using. > > > > They are some module under GPL like license not yet pacakged. > > > > But I was thinking Built-Using may be used by security team in order > > to trigger rebuild. > > Yes. Policy was changed to say that Built-Using should be used only for > licensing issues. This was the release team's preference, and I believe > they took the needs of the security team into account in coming to that > preference. Ok adding cc @security How will you handle security problem in static (browserified/webpacked) javascript library ? Bastien > -- > Sean Whitton
Bug#908215: ITP: lagan -- highly parametrizable pairwise global genome sequence aligner
Package: wnpp Severity: wishlist Owner: Steffen Moeller * Package name: lagan * URL : http://lagan.stanford.edu/lagan_web/index.shtml * License : GPL Programming Lang: C++ Description : highly parametrizable pairwise global genome sequence aligner The package is team maintained on salsa.d.o/med-team/lagan.
Bug#908233: ITP: mview -- biological sequence alignment conversion
Package: wnpp Severity: wishlist Owner: Steffen Moeller * Package name: mview Version : 1.64 * URL : https://desmid.github.io/mview/ * License : GPL Programming Lang: Perl Description : biological sequence alignment conversion Team-maintained on https://salsa.debian.org/med-team/mview.
Re: New package netgen-lvs with binary /usr/bin/netgen - already taken
>> What is the recommendation? Any links to previous discussions / documents >> about >> this subject? > Policy 10.1. Thanks Andrey for pointing out the relevant policy chapter. I should have mentioned it in my first post since exactly that section in a way brought me to this list. However, I think the policy gives us a lot of freedom to choose (it is not very strict in this case). The alternatives system is supposed to be used for packages which provide similar functionality (as far as I have understood), and that is absolutely not the case here. Let me do it this way then: I will propose what I intend to do with netgen-lvs (what i think may be best), and then we will see if anyone has better ideas. :) 1. The new source package netgen-lvs will contain two binary packages: - netgen-lvs - netgen-lvs-base 2. netgen-lvs will have a Conflict: netgen (existing unrelated package). 3. The netgen-lvs-base binary package comes with all the (main) files for netgen-lvs. The executable will be called /usr/bin/netgen-lvs It will NOT conflict with "netgen". 4. the netgen-lvs source package will be patched such that it works with the executable called /usr/bin/netgen-lvs (there are some tcl scripts and python scripts) 5. The netgen-lvs binary package provides basically just a symlink from /usr/bin/netgen to /usr/bin/netgen-lvs 6. The netgen-lvs binary package depends on netgen-lvs-base 7. A paragraph is added to the long description for netgen-lvs which explains that it conflicts with netgen (3d tetrahedral mesh generator), and if both are supposed to be installed at the same time, the package netgen-lvs-base must be installed instead of netgen-lvs. Also: i. A similar paragraph in the long description can later be added to netgen's long description. ii. A "Conflict: netgen-lvs" should be added to netgen later. iii. Maybe in the future, the "netgen" package can provide a similar "alternative binary package" for people who would like to have both netgen and netgen-lvs installed, but /usr/bin/netgen representing netgen-lvs This will allow people to run "apt install netgen-lvs" and they will get a netgen install which behaves exactly as the upstream version. (usr/bin/netgen is what they think it is) This still allows people to have both netgen and netgen-lvs(source) installed, but then netgen-lvs will be found as /usr/bin/netgen-lvs. I know that the alternatives system can technically be used to achieve similar functionality, but it feels like it is meant only for cases where the various programs provide similar functionality, and therefore not for this case. Best regards Ruben
Re: New package netgen-lvs with binary /usr/bin/netgen - already taken
On 9/7/18 10:10 PM, Ruben Undheim wrote: > 3. The netgen-lvs-base binary package comes with all the (main) files for >netgen-lvs. The executable will be called /usr/bin/netgen-lvs >It will NOT conflict with "netgen". > > 4. the netgen-lvs source package will be patched such that it works with the >executable called /usr/bin/netgen-lvs (there are some tcl scripts and > python >scripts) stupid idea: do these scripts (and other consumers of the netgen binaries) actually use the fully qualified "/usr/bin/netgen" or just an unqualified "netgen"? if the latter, you might just put the unchanged names into something like /usr/share/netgen/bin/ and tell users to add to that to their PATH when running their scripts. that provides a simple compat layer for out-of-distro scripts. rdeps in Debian should be patched to use debianized script-names. gfdasr IOhannes signature.asc Description: OpenPGP digital signature
Bug#908278: ITP: libimagequant -- palette quantization library (development files)
Package: wnpp Severity: wishlist Owner: Andreas Tille * Package name: libimagequant Version : 2.12.1 Upstream Author : Kornel Lesiński * URL : https://github.com/ImageOptim/libimagequant * License : GPL-3.0+ Programming Lang: C Description : palette quantization library (development files) Small, portable C library for high-quality conversion of RGBA images to 8-bit indexed-color (palette) images. . This library powers pngquant and other PNG optimizers. Remark: This package is maintained by Debian PhotoTools Maintainers at https://salsa.debian.org/debian-phototools-team/libimagequant This package was originally prepared by Herbert Parentes Fortes Neto in Git but there was no ITP for the package. Since I intend to upgrade pngquant which needs this library I polished the package and send the ITP. Herbert, please let me know if I missed something.
Re: Browserified copy and DFSG
On Fri, Sep 7, 2018 at 7:22 PM, Bastien ROUCARIES wrote: > Ok adding cc @security > > How will you handle security problem in static > (browserified/webpacked) javascript library ? Same goes for the other languages that do static linking. It would be great to have this wiki page updated with some realistic strategies: https://wiki.debian.org/StaticLinking IIRC the security team recently flagged Go packages as being problematic for security support in the Debian buster release. I guess the same will apply to Rust now that Firefox switched to it? -- bye, pabs https://wiki.debian.org/PaulWise
