[Bug 1951066] [NEW] [MIR] dh-elpa

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Lukas Märdian (slyon):

[Availability]
The package src:dh-elpa is already in Ubuntu universe.
The package dh-elpa-helper build for the architectures it is designed to work on
It currently builds and works for architectures: all (arch independent)
Link to package [[https://launchpad.net/ubuntu/+source/dh-elpa|src:dh-elpa]]

It is enough to promote the dh-elpa-helper binary to main.

[Rationale]
- The package dh-elpa-helper is required in Ubuntu main as src:cmake dependency
- The package src:dh-helper will not generally be useful for a large part of
  our user base, but is important/helpful still because it is a higher level
  abstraction layer around src:emacsen-common that is used by src:cmake and
  others to unify the installation of elpa packages (like "cmake-mode").
- Additional reasons: we provided syntax highlighting and indentation for
  CMakeLists.txt and *.cmake source files in emacs previously and do not want
  to drop that.
- Additionally new use-cases enabled by this are: NONE, just keeping status quo
- Package dh-elpa covers the same use case as emacsen-common, but is better
  because it is a higher level abstraction layer, thereby we want to put it on
  top to avoid common errors such as https://bugs.debian.org/802915
- The package dh-elpa-helper is a new runtime dependency of package cmake-data
  that we already support

[Security]
- No CVEs/security issues in this software in the past
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software
  (filters, scanners, plugins, UI skins, ...) – it provides an extension to the
  debhelper build environment, tho.

[Quality assurance - function/usage]
- The package works well right after install – if elpa dehbehlper and
  ${elpa:Depends} are being used

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many
  and long term critical bugs open
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/dh-elpa/+bug => 0 bugs
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=dh-elpa
    => no critical bugs, but 1 long standing bug, classified as "important"
       https://bugs.debian.org/886024 It cannot be reproduced by the upstream
       developers and morphed more into a proposal that the maintainers are
       unconvinced of, therefore it stalled
    => Another interesting bug is https://bugs.debian.org/995936 that is being
       discussed as of recently and would remove the Ubuntu delta if resolved.
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package does not run a test at build time. ELPA_NAME is set and ./dh_elpa
  executed but that doesn't seem to fail the build anything is wrong.
- The package does not run an autopkgtest because non is provided in
  debian/tests
- README.org states a limitation: "This tool is currently not very well tested."
- We could try adding an autopkgtest that builds a simple elpa package, as
  descibed in https://wiki.debian.org/Teams/DebianEmacsenTeam/elpa-hello, that
  we could maybe also run at build time.

[Quality assurance - packaging]
- debian/watch is present and works
- This package does not yield massive lintian Warnings, Errors
  => out-of-date-standards-version could/should be updated
- Link to recent build log including a lintian run https://paste.ubuntu.com/p/4GRz5zJS8w/
- Lintian overrides are present, but ok because debian/watch is present, even
  though this is a native package, but watchfile is used with pkg-emacsen PET
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default
- Packaging and build is easy, link to d/rules https://paste.ubuntu.com/p/km3WdffNcJ/

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- Team is not yet, but will subscribe to the package before promotion
  => I suggest the desktop team to take care of this package, as it is an
     abstraction layer above emacsen-common, that is being owned by the desktop
     team.
- This does not use static builds
- This does not use vendored code

[Background information]
- The Package description explains the package well
- Upstream Name is dh-elpa
- Link to upstream project https://salsa.debian.org/emacsen-team/dh-elpa
- This package is a native Debian package, created & maintained by the Debian
  Emacsen team.

[TODO]
I suggest the following TODOs before this is ready for promotion:
- subscribe ~desktop-packages (as this is a higher level abstraction of
  emacsen-common)
- merge the latests upstream version from Debian
- update the standards version
- add an autopkgtests to build a simple "elpa-hello" package, as described in
  https://wiki.debian.org/Teams/DebianEmacsenTeam/elpa-hello

** Affects: cmake (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: dh-elpa (Ubuntu)
     Importance: Undecided
     Assignee: Lukas Märdian (slyon)
         Status: Fix Committed

** Affects: dh-elpa (Debian)
     Importance: Unknown
         Status: New


** Tags: jammy update-excuse
-- 
[MIR] dh-elpa
https://bugs.launchpad.net/bugs/1951066
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.