Re: [gentoo-dev] does v8 shared library make sense with current upstream approach?

[Michał Górny]

Dnia 2013-09-22, o godz. 17:17:53
""Paweł Hajdan, Jr."" <phajdan.jr@g.o> napisał(a):

> I'd like maintainers of all packages depending on dev-lang/v8 to make
> their packages use bundled v8 copy instead (I can file bugs for that,
> let's discuss here whether it should be done).
>
> For now V8 upstream gives no guarantees about API/ABI stability and
> actually breaks it very often
> (<http://upstream-tracker.org/versions/v8.html>). Having a shared
> library so closely tied to packages (which results in frustrating
> blockers, since v8 is updated often and chromium is synchronized with
> that) is not really much different from everyone bundling the library.
> I'd like that to improve, but for now it's time for a pragmatic solution
> to this IMHO.

If this trend continues, I think we should work on some technical way
of tracking bundled libraries, e.g. for security issues. Like ebuilds
listing the corresponding Gentoo packages, like:

  QA_BUNDLES="dev-foo/bar-1.2.3"

-- 
Best regards,
Michał Górny