Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2

[John Paul Adrian Glaubitz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 06/19/2015 01:02 PM, James Cowgill wrote:
> Using apt-get with --install-suggests isn't that common so I don't 
> think this warrants an RC severity (it doesn't break the package
> for everyone).

It was RC severity before, see [1]. Furthermore, ROAR audio currently
breaks cmus because of DECnet and the ROAR developers refuse to
remove support for it.

> If you look at the status of DECnet:
> 
> No kernel maintainer (except general net/ maintenance): 
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/M
AINTAINERS?id=v4.1-rc8#n3060
>
>  dnprogs upstream appears to be dead: 
> http://sourceforge.net/projects/linux-decnet/
> 
> dnprogs is orphaned: 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750670

Which is my whole point.

> IMHO dnprogs should be removed and roaraudio should drop support
> for DECnet - unless someone who actually uses DECnet is willing to
> maintain this stuff.

The ROAR developers and maintainers refuse to do that which is why
we should drop it from cmus. They, for some reason, think it's important
to support a pre-historic networking protocol.

Adrian

> [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675610

- -- 
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaubitz at debian.org
`. `'   Freie Universitaet Berlin - glaubitz at physik.fu-berlin.de
  `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=yZR9
-----END PGP SIGNATURE-----