[MIR] mathjax
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| mathjax (Ubuntu) |
Fix Released
|
Undecided
|
Didier Roche-Tolomelli | ||
Bug Description
[Availability]
Currently in Ubuntu universe. Built for all supported architectures. In sync with Debian.
[Rationale]
This package is a new dependency of the 'sphinx-doc' package (src:sphinx, as of version 2.3.1-1) that we already support.
[Security]
No known security issues:
https:/
https:/
Past issue CVE-2018-1999024 affects only versions < 2.7.4:
https:/
No security relevant binaries contained. No files in /sbin or /usr/sbin, no system services/daemons or other security relevant constraints.
[Quality assurance]
* The package provides a JS library, which can be used easily from
/usr/
* No debconf dialogs.
* No critical outstanding bugs which affect the usability. Upstream provides regular bugfix releases for the 2.7.* branch at https:/
* No bugs in Ubuntu.
https:/
* Debian marks 1 out of 2 bugs 'Important':
https:/
BTS#919981: Ugly formulas in jupyter
-> Affects the rendering in 'jupyter', which is in Ubuntu universe.
Does not seem to be a critical bug.
* Upstream lists 25 issues, which were not marked to be fixed or postponed.
None of those seems to be critical:
https:/
* Ubuntu is in sync with Debian. Debian last updated the package 2018-05-15.
Looking for a new maintainer, due to a new major upstream release (3.0).
Debian-
https:/
https:/
https:/
* No exotic hardware required.
* No autopkgtests. No build tests.
* debian/watch available.
* lintian --pedantic shows 3 relevant, non-critical warnings:
P: mathjax source: package-
P: mathjax source: rules-requires-
P: mathjax source: uses-debhelper-
* Does not rely on obsolete/demoted packages.
[UI standards]
Not a user facing application.
[Dependencies]
All binary dependencies and recommends are provided by the source package itself.
yui-compressor (universe) is only in Build-Depends.
[Standards compliance]
Uses mostly debhelper and meets FHS and Debian Policy Standards-Version 4.1.4.
[Maintenance]
Simple package, which can be synced from Debian, especially as the Debian-
Otherwise, Ubuntu Foundations should be assigned.
[Background information]
MathJax is a JavaScript library/display engine for mathematics that works in all browsers. It is used by sphinx-doc (main) to render their documentation pages.
| tags: | added: id-5ebd6bcd427ff64baa4b9993 |
| Changed in mathjax (Ubuntu): | |
| assignee: | nobody → Didier Roche (didrocks) |
| Didier Roche-Tolomelli (didrocks) wrote | #1 |
| Changed in mathjax (Ubuntu): | |
| status: | New → Incomplete |
| Lukas Märdian (slyon) wrote | #2 |
| Changed in mathjax (Ubuntu): | |
| status: | Incomplete → New |
| Dmitry Shachnev (mitya57) wrote | #3 |
| Didier Roche-Tolomelli (didrocks) wrote | #4 |
| Changed in mathjax (Ubuntu): | |
| status: | New → Incomplete |
| Dmitry Shachnev (mitya57) wrote | #5 |
| Lukas Märdian (slyon) wrote | #6 |
| Steve Langasek (vorlon) wrote | #7 |
| Dmitry Shachnev (mitya57) wrote | #8 |
| Changed in mathjax (Ubuntu): | |
| status: | Incomplete → New |
| Didier Roche-Tolomelli (didrocks) wrote | #9 |
| Changed in mathjax (Ubuntu): | |
| status: | New → Triaged |
| Matthias Klose (doko) wrote | #10 |
| Changed in mathjax (Ubuntu): | |
| status: | Triaged → Fix Released |
All looks good on the MIR side.
I’m not a big fan that we have the minimized MathJax.js source directly shipped rather than rebuilding it from the unpacked version that we shipped as well, but no rule is preventing this for javascript package. Note that this is manually overriden in:
./debian/
mathjax source: source-is-missing
mathjax source: source-
It ships its vendored version of combiner and compressor.
The code itself doesn’t seem to use particular tricks which should emit warnings to us.
I would like though that a bug and fix is filed upstream to avoid having this ogg being executable:
W: libjs-mathjax: executable-
ubuntu-foundations is not assigned though, mind poking them? I’m happy to +1 on the MIR once this is done.