1 |
"Stuart Herbert" <Stuart.Herbert@×××××.com> writes: |
2 |
|
3 |
> Mmm ... what are you trying to achieve here? |
4 |
> |
5 |
> a) /usr/share/js isn't served by any of our standard webserver installs; |
6 |
> files you place in here aren't downloadable |
7 |
|
8 |
Yes, sorry :) I already realized that it was a bad idea. |
9 |
|
10 |
> b) web-based apps will expect the javascript libraries to sit in a |
11 |
> specific location under the htdocs directory |
12 |
> c) different web-based apps will ship different versions of javascript |
13 |
> libraries |
14 |
> d) sooner or later, web-based apps will ship javascript libraries with |
15 |
> their own modifications. we already get that behaviour with apps that |
16 |
> ship bundled PEAR packages. |
17 |
|
18 |
Yes, these libraries are more like the webapps themselves. Simply does |
19 |
not fit into our current concept. At least I don't see an easy |
20 |
solution, so I'll just leave it for now. |
21 |
|
22 |
> e) The Gentoo philosophy is to remain as close to upstream as possible. |
23 |
> Because we're a meta-distribution, and not a traditional distribution |
24 |
> like Red Hat, the only time we try and change what UPSTREAM does is when |
25 |
> we absolutely have to. |
26 |
|
27 |
While I agree that it is certainly easier to keep the packages as |
28 |
UPSTREAM bundles them, I'm not convinced that this is always a good |
29 |
idea. If the effort is small, I'd rather patch the package to use the |
30 |
standard libraries and send the patch upstream. Not only because it's |
31 |
simply bad programming style but also because it's easier to handle |
32 |
security this way. The package I'm looking at right now includes an |
33 |
old phpmailer library with a known DOS vulnerability. I'd rather have |
34 |
one place to fix a library then checking for packages that bundle the |
35 |
library. |
36 |
|
37 |
Regards, |
38 |
|
39 |
Gunnar |
40 |
|
41 |
|
42 |
-- |
43 |
Gunnar Wrobel Gentoo Developer |
44 |
__________________C_o_n_t_a_c_t__________________ |
45 |
|
46 |
Mail: wrobel@g.o |
47 |
WWW: http://www.gunnarwrobel.de |
48 |
IRC: #gentoo-web at freenode.org |
49 |
_________________________________________________ |