What is bundling in the sense of
<https://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries>?
In my opinion, the page deals with source package contents.
But there are other things a package can do "bundle" things in the
binary packages, by copying code and data from installed packages in the
build root. These have comparable negative effects to bundling at the
source package level. Examples are static linking (already covered
elsewhere), Java "static" linking (jarjar, Maven bundling, perhaps
others), things like minify/lstrip/fatpack, copying programs and .so
files out of the build root, etc.
Are these post-SRPM copying mechanism in scope for the "no bundled
libraries" page, or should they be covered in other places?
--
Florian Weimer / Red Hat Product Security Team
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
