https://bugzilla.redhat.com/show_bug.cgi?id=1760617 --- Comment #19 from Orion Poplawski <orion@xxxxxxxx> --- I don't see how using packaged versions of static/header libraries could be detrimental. The roles of the "Provides: bundled()" idiom is to determine who makes use of a library in any way. The primary use is in case of a security issue with a library - how would you determine what packages would need to get fixed? For static libraries you would look at the BuildRequires. But if a package uses a bundled version, how would you tell? By examining the Provides: bundled() items. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx