> This will leave these binary packages installed on users' systems. What if there's a future security update that address vulnerabilities in them?
They were not functional in the first place. Both were just an experiment hidden behind a switch, which was off by default. Also there is no much sense in developing them to a working state, since Firefox dropped any plugins other than Flash. They'll just be ignored by the browser.
So, most probably, there won't be any updates for -libpdf and -nacl.
> Another option might be to turn them into empty packages.
That would be nice. It's better to have them removed, since some other browsers could still load other plugins. And if for some reason some future update reintroduces those plugins again, updates would be easier. I guess with Break/Replace it will be trickier.
> This will leave these binary packages installed on users' systems. What if there's a future security update that address vulnerabilities in them?
They were not functional in the first place. Both were just an experiment hidden behind a switch, which was off by default. Also there is no much sense in developing them to a working state, since Firefox dropped any plugins other than Flash. They'll just be ignored by the browser.
So, most probably, there won't be any updates for -libpdf and -nacl.
> Another option might be to turn them into empty packages.
That would be nice. It's better to have them removed, since some other browsers could still load other plugins. And if for some reason some future update reintroduces those plugins again, updates would be easier. I guess with Break/Replace it will be trickier.