[Availability]
The package src:dh-elpa is already in Ubuntu universe.
The package dh-elpa-helper build for the architectures it is designed to work on
It currently builds and works for architectures: all (arch independent)
Link to package [[https://launchpad.net/ubuntu/+source/dh-elpa|src:dh-elpa]]
It is enough to promote the dh-elpa-helper binary to main.
[Rationale]
- The package dh-elpa-helper is required in Ubuntu main as src:cmake dependency
- The package src:dh-helper will not generally be useful for a large part of
our user base, but is important/helpful still because it is a higher level
abstraction layer around src:emacsen-common that is used by src:cmake and
others to unify the installation of elpa packages (like "cmake-mode").
- Additional reasons: we provided syntax highlighting and indentation for
CMakeLists.txt and *.cmake source files in emacs previously and do not want
to drop that.
- Additionally new use-cases enabled by this are: NONE, just keeping status quo
- Package dh-elpa covers the same use case as emacsen-common, but is better
because it is a higher level abstraction layer, thereby we want to put it on
top to avoid common errors such as https://bugs.debian.org/802915
- The package dh-elpa-helper is a new runtime dependency of package cmake-data
that we already support
[Security]
- No CVEs/security issues in this software in the past
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software
(filters, scanners, plugins, UI skins, ...) – it provides an extension to the
debhelper build environment, tho.
[Quality assurance - function/usage]
- The package works well right after install – if elpa dehbehlper and
${elpa:Depends} are being used
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many
and long term critical bugs open
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/dh-elpa/+bug => 0 bugs
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=dh-elpa
=> no critical bugs, but 1 long standing bug, classified as "important"
https://bugs.debian.org/886024 It cannot be reproduced by the upstream
developers and morphed more into a proposal that the maintainers are
unconvinced of, therefore it stalled
=> Another interesting bug is https://bugs.debian.org/995936 that is being
discussed as of recently and would remove the Ubuntu delta if resolved.
- The package does not deal with exotic hardware we cannot support
[Quality assurance - testing]
- The package does not run a test at build time. ELPA_NAME is set and ./dh_elpa
executed but that doesn't seem to fail the build anything is wrong.
- The package does not run an autopkgtest because non is provided in
debian/tests
- README.org states a limitation: "This tool is currently not very well tested."
- We could try adding an autopkgtest that builds a simple elpa package, as
descibed in https://wiki.debian.org/Teams/DebianEmacsenTeam/elpa-hello, that
we could maybe also run at build time.
[Quality assurance - packaging]
- debian/watch is present and works
- This package does not yield massive lintian Warnings, Errors
=> out-of-date-standards-version could/should be updated
- Link to recent build log including a lintian run https://paste.ubuntu.com/p/4GRz5zJS8w/
- Lintian overrides are present, but ok because debian/watch is present, even
though this is a native package, but watchfile is used with pkg-emacsen PET
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default
- Packaging and build is easy, link to d/rules https://paste.ubuntu.com/p/km3WdffNcJ/
[UI standards]
- Application is not end-user facing (does not need translation)
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- Team is not yet, but will subscribe to the package before promotion
=> I suggest the desktop team to take care of this package, as it is an
abstraction layer above emacsen-common, that is being owned by the desktop
team.
- This does not use static builds
- This does not use vendored code
[Background information]
- The Package description explains the package well
- Upstream Name is dh-elpa
- Link to upstream project https://salsa.debian.org/emacsen-team/dh-elpa
- This package is a native Debian package, created & maintained by the Debian
Emacsen team.
[TODO]
I suggest the following TODOs before this is ready for promotion:
- subscribe ~desktop-packages (as this is a higher level abstraction of
emacsen-common)
- merge the latests upstream version from Debian
- update the standards version
- add an autopkgtests to build a simple "elpa-hello" package, as described in
https://wiki.debian.org/Teams/DebianEmacsenTeam/elpa-hello
Adding a patch that resolves most of the TODO