On Thu, Aug 28, 2014 at 9:14 AM, Andreas Moog wrote:

> There is (as far as I can see) only one other package in Debian that uses
> elycharts, ocsinventory-server [2], and they use an older snapshot of the
> library, so I do not know if providing a separate package would be useful.

According to some external code search engines/sites, there are a many
more projects using elycharts, so I think providing a separate package
would be useful to anyone thinking of packaging those. Also developers
might notice the package and start writing software to use elycharts.

https://code.ohloh.net/search?s=elycharts&p=0
https://searchcode.com/?q=elycharts
https://github.com/search?l=&q=elycharts&ref=advsearch&type=Code&utf8=%E2%9C%93

Please do verify if ocsinventory-server can use more recent versions
of elycharts and contact upstream about removing/updating their copy.

> Would I need to inform the security team about the code copy as well?

Yes please. More info about embedded code copies stuff here:

https://wiki.debian.org/EmbeddedCodeCopies

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caktje6g8vy0dlmksxagpng-ebrnikuoyg1sdvcz5qd7poh5...@mail.gmail.com

Reply via email to