[MIR] jzlib

[Artur Rona]

    Availability: Already in universe, builds fine and only on i386. The last auto-sync was OK: https://launchpad.net/ubuntu/+source/jzlib/1.1.3-1/+build/5138952

    Rationale: Sync jsch 0.1.50-1 (main) is blocked due to that MIR. It's got a new Build-Depends on libjzlib-java. That's the reason of MIR. LP: #1249591

    Security: There is no any security issue, which is package affected.

    Quality assurance:
       No problem reported. It is just a small java package. No Debian/Launchpad bug reported. debian/uscan works fine:
$ uscan --verbose
-- Scanning for watchfiles in .
-- Found watchfile in ./debian
-- In debian/watch, processing watchfile line:
   https://github.com/ymnk/jzlib/tags .*/([\d\.]+).tar.gz
-- Found the following matching hrefs:
     /ymnk/jzlib/archive/1.1.3.tar.gz (1.1.3)
     /ymnk/jzlib/archive/1.1.2.tar.gz (1.1.2)
     /ymnk/jzlib/archive/1.1.1.tar.gz (1.1.1)
     /ymnk/jzlib/archive/1.1.0.tar.gz (1.1.0)
Newest version on remote site is 1.1.3, local version is 1.1.3
 => Package is up to date
-- Scan finished

    UI standards: Not related.

    Dependencies:
Build-Depends: debhelper (>= 7), default-jdk, javahelper, maven-repo-helper (>= 1.6) - all in main
Depends: ${misc:Depends}

    Standards compliance: I think it's OK.

    Maintenance: The package got active maintainers. Everything is OK.

[Michael Terry (mterry)]

Assigning to security team member for assessment on whether this needs a security review and/or opinion on how bad supporting another zlib implemention is.

[Jamie Strandboge (jdstrand)]

This seems to no longer be needed. Closing task-- please reopen if this is in error.