[Pkg-javascript-devel] Bug#846076: node-cross-spawn-async dependencies are too strict

Pirate Praveen praveen at onenetbeyond.org
Mon Nov 28 10:26:48 UTC 2016


package: node-cross-spawn-async
version: 2.2.5-1
severity: serious
justification: unsustainable, makes updating dependencies harder than it
needs to be

please use only >= for dependencies, if it can't work with a newer
version, its a bug that needs to be fixed.

-------- Forwarded Message --------
Subject: Re: [Pkg-javascript-devel] node-lru-cache_4.0.2-1_amd64.changes
ACCEPTED into unstable
Date: Mon, 28 Nov 2016 11:18:00 +0100
From: Jérémy Lal <kapouer at melix.org>
To: Pirate Praveen <praveen at onenetbeyond.org>
CC: Debian Javascript Maintainers
<pkg-javascript-devel at lists.alioth.debian.org>

2016-11-28 11:10 GMT+01:00 Pirate Praveen <praveen at onenetbeyond.org>:
> On തിങ്കള്‍ 28 നവംബര്‍ 2016 05:49 രാവിലെ, Debian FTP Masters wrote:
>>    * New upstream version 4.0.2
>
> This broke node-cross-spawn-aysnc, I think this type of dependency
> declaration is not sustainable.
>
> https://anonscm.debian.org/cgit/pkg-javascript/node-cross-spawn-async.git/tree/debian/control#n24
>
> Anyway, if we used build-and-upload script from pkg-ruby-extras, we
> could have found out this before uploading node-lru-cache 4.0.2-1

Not convinced by << version dependency either.
pkg-ruby-extras build-and-upload tests for reverse (build-)
dependencies are great,
will use it next time.

Jérémy


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20161128/35cb05f6/attachment.sig>


More information about the Pkg-javascript-devel mailing list