Re: [gentoo-dev] does v8 shared library make sense with current upstream approach?

[Richard Yao]

On 09/23/2013 05:48 AM, Michał Górny wrote:
> Dnia 2013-09-22, o godz. 17:17:53
> ""Paweł Hajdan, Jr."" <phajdan.jr@g.o> napisał(a):
>
>> I'd like maintainers of all packages depending on dev-lang/v8 to make
>> their packages use bundled v8 copy instead (I can file bugs for that,
>> let's discuss here whether it should be done).
>>
>> For now V8 upstream gives no guarantees about API/ABI stability and
>> actually breaks it very often
>> (<http://upstream-tracker.org/versions/v8.html>). Having a shared
>> library so closely tied to packages (which results in frustrating
>> blockers, since v8 is updated often and chromium is synchronized with
>> that) is not really much different from everyone bundling the library.
>> I'd like that to improve, but for now it's time for a pragmatic solution
>> to this IMHO.
>
> If this trend continues, I think we should work on some technical way
> of tracking bundled libraries, e.g. for security issues. Like ebuilds
> listing the corresponding Gentoo packages, like:
>
>   QA_BUNDLES="dev-foo/bar-1.2.3"
>

One idea is to make a new bundled-lib category for virtual packages and
then make virtual package for each library that is bundled.