On 7/3/23 11:59, Tom Hughes wrote: > On 03/07/2023 16:41, Demi Marie Obenour wrote: > >> Would it be possible to ensure that Node packages contain only actual source >> code, as in “the preferred form for making modifications” (quote from GNU GPL, >> I forget which version)? > > The simple answer is maybe in principle but in practice it's > very hard as numerous previous threads will tell you. > > The tar balls from the npmjs registry which constitute the > released versions of node packages frequently contain such > things often without the original source or any of the tooling > to build from it. > > The alternative is packaging from the upstream git but even > then, and even if it is well maintained with version tags, there > are often huge dependency chains to get all the tools needed to > actually do the builds. I thought Fedora policy required shipping actual source code, in which case this alternative is the only option allowed. -- Sincerely, Demi Marie Obenour (she/her/hers) _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
