From unknown Thu Jun 19 14:05:01 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#58089 <58089@debbugs.gnu.org> To: bug#58089 <58089@debbugs.gnu.org> Subject: Status: python-bokeh package contains prebuilt javascript. Reply-To: bug#58089 <58089@debbugs.gnu.org> Date: Thu, 19 Jun 2025 21:05:01 +0000 retitle 58089 python-bokeh package contains prebuilt javascript. reassign 58089 guix submitter 58089 Diane Trout severity 58089 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Mon Sep 26 04:09:34 2022 Received: (at submit) by debbugs.gnu.org; 26 Sep 2022 08:09:34 +0000 Received: from localhost ([127.0.0.1]:49233 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ocjBF-00010c-8S for submit@debbugs.gnu.org; Mon, 26 Sep 2022 04:09:34 -0400 Received: from lists.gnu.org ([209.51.188.17]:47108) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oca3b-00071G-OI for submit@debbugs.gnu.org; Sun, 25 Sep 2022 18:25:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33656) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oca3b-0000ka-IS for bug-guix@gnu.org; Sun, 25 Sep 2022 18:25:03 -0400 Received: from chaos.caltech.edu ([131.215.34.119]:55600) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oca3W-0006Px-Mf for bug-guix@gnu.org; Sun, 25 Sep 2022 18:25:03 -0400 Received: from 99-121-215-28.lightspeed.irvnca.sbcglobal.net ([99.121.215.28] helo=[192.168.1.69]) by chaos.caltech.edu with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1oca1L-0000nV-OZ for bug-guix@gnu.org; Sun, 25 Sep 2022 15:22:43 -0700 Message-ID: <4b7be8ca35b9b9347ccad1f720752603d617f18a.camel@ghic.org> Subject: python-bokeh package contains prebuilt javascript. From: Diane Trout To: bug-guix@gnu.org Date: Sun, 25 Sep 2022 15:22:42 -0700 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.45.3-2 MIME-Version: 1.0 Received-SPF: pass client-ip=131.215.34.119; envelope-from=diane@ghic.org; helo=chaos.caltech.edu X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Mon, 26 Sep 2022 04:09:27 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Hi, I noticed that the guix packaging for bokeh just downloads the source code from pypi. But that source unfortunately contains some prebuilt javascript. Mostly it's source readable but there's a few .min.js files as well. And it wouldn't pass Debian's submission guidelines since the javascript code is compiled from other projects. I'm not sure what your policies are on prebuilt javascript. >From one of the guix install directories I found 519 .js files, of which 18 were .min.js files. /gnu/store/xwf87w9v7g7vphci39v34zgyxg8w31f5-python-bokeh- 2.4.3/lib/python3.9/site-packages/bokeh$ find . -name "*.js" | wc -l 519 /gnu/store/xwf87w9v7g7vphci39v34zgyxg8w31f5-python-bokeh- 2.4.3/lib/python3.9/site-packages/bokeh$ find . -name "*.min.js" | \ wc -l 18 Diane=20 From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 27 03:46:55 2022 Received: (at 58089) by debbugs.gnu.org; 27 Sep 2022 07:46:55 +0000 Received: from localhost ([127.0.0.1]:52380 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1od5It-00018q-0w for submit@debbugs.gnu.org; Tue, 27 Sep 2022 03:46:55 -0400 Received: from mailrelay.tugraz.at ([129.27.2.202]:32688) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1od5Iq-00018e-OM for 58089@debbugs.gnu.org; Tue, 27 Sep 2022 03:46:53 -0400 Received: from lprikler-laptop.ist.intra (gw.ist.tugraz.at [129.27.202.101]) by mailrelay.tugraz.at (Postfix) with ESMTPSA id 4McBXS2QHBz1LWp5; Tue, 27 Sep 2022 09:46:48 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 mailrelay.tugraz.at 4McBXS2QHBz1LWp5 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tugraz.at; s=mailrelay; t=1664264809; bh=6SlkQYlCGnOSEg3UOXbxiGCVbEFYAw/2Y0QBUYxrEs0=; h=Subject:From:To:Date:In-Reply-To:References:From; b=HO6GuFsvJnWFXoYEZS1diBuNzjDbVecUNXqb1y2yanXNL86WxK2FwDVtox5IcLSEY HSVpLYRnur4en2DWbgqklqL1zhArtDfbLGANIiV9mFJq7uosd/jMI5R7maOkqB+Ubg iM/FPafnJXl/P2Hf30a7P2rCA3VFJa3FCdBqeG1o= Message-ID: <1e9f8e34c7c03e5049dade765ae149b2f967ebf5.camel@ist.tugraz.at> Subject: Re: python-bokeh package contains prebuilt javascript. From: Liliana Marie Prikler To: Diane Trout , 58089@debbugs.gnu.org Date: Tue, 27 Sep 2022 09:46:47 +0200 In-Reply-To: <4b7be8ca35b9b9347ccad1f720752603d617f18a.camel@ghic.org> References: <4b7be8ca35b9b9347ccad1f720752603d617f18a.camel@ghic.org> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.46.0 MIME-Version: 1.0 X-TUG-Backscatter-control: waObeELIUl4ypBWmcn/8wQ X-Spam-Scanner: SpamAssassin 3.003001 X-Spam-Score-relay: -1.9 X-Scanned-By: MIMEDefang 2.74 on 129.27.10.117 X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 58089 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Am Sonntag, dem 25.09.2022 um 15:22 -0700 schrieb Diane Trout: > I'm not sure what your policies are on prebuilt javascript. Our policy is currently pending a rewrite, but TL;DR: we consider both bundled and prebuilt sources unwanted. Since bokeh's javascript is actually typescript (which hasn't been bootstrapped yet), the proper course of action would be to either remove it or remove bokeh (as well as python-ikarus). Cheers From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 27 15:16:32 2022 Received: (at 58089) by debbugs.gnu.org; 27 Sep 2022 19:16:32 +0000 Received: from localhost ([127.0.0.1]:56826 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1odG4F-0004JC-Lr for submit@debbugs.gnu.org; Tue, 27 Sep 2022 15:16:32 -0400 Received: from chaos.caltech.edu ([131.215.34.119]:50054) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1odE4R-00053j-Fb for 58089@debbugs.gnu.org; Tue, 27 Sep 2022 13:08:37 -0400 Received: from 99-121-215-28.lightspeed.irvnca.sbcglobal.net ([99.121.215.28] helo=[192.168.1.69]) by chaos.caltech.edu with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1odE4N-0000dt-NN; Tue, 27 Sep 2022 10:08:31 -0700 Message-ID: <8efda4c4af97b99b2a218a81e396e90f81897ba2.camel@ghic.org> Subject: Re: python-bokeh package contains prebuilt javascript. From: Diane Trout To: Liliana Marie Prikler , 58089@debbugs.gnu.org Date: Tue, 27 Sep 2022 10:08:30 -0700 In-Reply-To: <1e9f8e34c7c03e5049dade765ae149b2f967ebf5.camel@ist.tugraz.at> References: <4b7be8ca35b9b9347ccad1f720752603d617f18a.camel@ghic.org> <1e9f8e34c7c03e5049dade765ae149b2f967ebf5.camel@ist.tugraz.at> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.45.3-2 MIME-Version: 1.0 X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 58089 X-Mailman-Approved-At: Tue, 27 Sep 2022 15:16:30 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) I thought the Guix project was trying to be similarly strict as Debian so wanted to let you know. On Tue, 2022-09-27 at 09:46 +0200, Liliana Marie Prikler wrote: > Am Sonntag, dem 25.09.2022 um 15:22 -0700 schrieb Diane Trout: > > I'm not sure what your policies are on prebuilt javascript. > Our policy is currently pending a rewrite, but TL;DR: we consider > both > bundled and prebuilt sources unwanted.=C2=A0 Since bokeh's javascript is > actually typescript (which hasn't been bootstrapped yet), the proper > course of action would be to either remove it or remove bokeh (as > well > as python-ikarus). >=20 > Cheers