Packaging (node?)JS components that bundle lots of (node?)JS deps

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

The Python based "bokeh" software has a JavaScript component[1].
Building the JS component requires nodejs and lots of nodejs libraries, and
is not tractable[2,3]. Fortunately, upstream includes a built version of
the necessary JS components in the PyPi release and these are installed
in the relevant Python locations required to use Bokeh from Python. So,
I was hoping to just use that in the Fedora package[4].

During the review, we realised that the JS bits rely on lots of other JS
libraries, and a lot of these are bundled in. I went looking and found
the package-lock.json file that includes all the runtime deps[5].

How does one proceed here? Should I grep the JS source to see what
libs are bundled and list them in the spec individually? I've tried
this already, and it's quite hard to find the bundled bits. For quite a
few of the ones I found, version information is not included in the
license headers, so I can't tell what version is bundled. I can refer to
the package-lock.json file to get version info of the bundled libs I
find, I guess?

My primary worry here is the going over the sources manually may result
in me missing libs (this will have to be done each time the package
needs to be updated too). I've got to rely on license headers and
associated key-words to locate them. On the other hand, the
package-lock.json file is the full dep tree, so using that as a
reference doesn't make it any easier either.


[1] https://github.com/bokeh/bokeh/tree/0b9526ef553d938bf5de187e2511564c648c13bd/bokehjs
[2] https://docs.bokeh.org/en/latest/docs/dev_guide/setup.html
[3] https://github.com/bokeh/bokeh/blob/0b9526ef553d938bf5de187e2511564c648c13bd/bokehjs/package.json
[4] https://bugzilla.redhat.com/show_bug.cgi?id=1879291
[5] https://github.com/bokeh/bokeh/blob/0b9526ef553d938bf5de187e2511564c648c13bd/bokehjs/package-lock.json

-- 
Thanks,
Regards,
Ankur Sinha "FranciscoD" (He / Him / His) | https://fedoraproject.org/wiki/User:Ankursinha
Time zone: Europe/London

Attachment: signature.asc
Description: PGP signature

_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux