Comment 2 for bug 1915695

Revision history for this message
Didier Roche-Tolomelli (didrocks) wrote :

[Summary]
Some work needed on tests as told in the description, and recommendations before final MIR ack. We can take the time to get them fixed as the request is not urgent.
The code didn’t change that much compared to our original projects already in main. Think of demoting the ones we have when handling the transition (probably next cycle)

Notes:
We should only promote the libayatana-appindicator3* flavors, not libayatana-appindicator which are depending on gtk2.

Required TODO:
- Fix test issues as in the description.

Recommended TODO:
- There are quite some deprecation warnings, would be great to get those fixed upstream.

[Duplication]
There is one package that is providing the exact same functionality, but it will be replaced by that one.

[Dependencies]
OK:
- no other Dependencies to MIR due to this
no -dev/-debug/-doc packages that need exclusion

[Embedded sources and static linking]
OK:
- no embedded source present
- no static linking

[Security]
OK:
- history of CVEs does not look concerning
- does not run a daemon as root
- does not use webkit1,2
- does not use lib*v8 directly
- does not parse data formats
- does not open a port
- does not process arbitrary web content
- does not use centralized online accounts
- does not integrate arbitrary javascript into the desktop
- does not deal with system authentication (eg, pam), etc)

[Common blockers]
OK:
- does not FTBFS currently (apart from tests failing, see below)
- does have a test suite that runs at build time. Test suite is currently failing: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982845
   - test suite fails will fail the build upon error.
- does not have a test suite that runs as autopkgtest, but similar than current situation
- The package will have a team bug subscriber
- no translation present, but none needed for this case (user visible)?
- not a python/go package, no extra constraints to consider in that regard

Problems:
- Ensure test suite is fixed in debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982845

[Packaging red flags]
OK:
- Ubuntu does not carry a delta
- symbols tracking is in place
- d/watch is present and looks ok
- Upstream update history is good
- Debian/Ubuntu update history is good
- the current release is packaged
- promoting this does not seem to cause issues for MOTUs that so far
- no massive Lintian warnings
- d/rules is rather clean even if support 2 builds (gtk2 and gtk3)
- Does not have Built-Using

[Upstream red flags]
OK:
- no Errors / few minor autotools warnings during the build (on tests). Tests are not built with -Werror, would be better to get that fixed.
- no incautious use of malloc/sprintf (as far as I can check it)
- no use of sudo, gksu, pkexec, or LD_LIBRARY_PATH
- no use of user nobody
- no use of setuid
- no important open bugs (crashers, etc) in Debian or Ubuntu
- no dependency on webkit, qtwebkit, seed or libgoa-*
- not part of the UI for extra checks

Problems:
- There are quite some deprecation warnings, would be great to get those fixed upstream.