-
Notifications
You must be signed in to change notification settings - Fork 18
Open
Description
Hi,
I'm taking up the work to package this library into Debian and I encountered the following issues:
- Privacy concerns with using google fonts to load roboto-mono font
I'm looking into using a system default/fonts package to overcome this.
Full error:
W: python3-textual-serve: privacy-breach-generic [<link\n rel="stylesheet"\n href="https://fonts.googleapis.com/css?family=roboto%20mono"\n />] (https://fonts.googleapis.com/css?family=roboto%20mono) [usr/lib/python3/dist-packages/textual_serve/templates/app_index.html]
N:
N: This package creates a potential privacy breach by fetching data from an
N: external website at runtime. Please remove these scripts or external HTML
N: resources.
N:
N: Please replace any scripts, images, or other remote resources with
N: non-remote resources. It is preferable to replace them with text and links
N: but local copies of the remote resources are also acceptable as long as
N: they don't also make calls to remote services. Please ensure that the
N: remote resources are suitable for Debian main before making local copies
N: of them.
N:
N: Visibility: warning
N: Show-Always: no
N: Check: files/privacy-breach
- Prebuilt Javascript object in source
Full error:
P: python-textual-serve source: source-contains-prebuilt-javascript-object [src/textual_serve/static/js/textual.js]
N:
N: The source tarball contains a prebuilt (minified) JavaScript object. They
N: are usually left by mistake when generating the tarball by not cleaning
N: the source directory first. You may want to report this as an upstream
N: bug, in case there is no sign that this was intended.
N:
N: Visibility: pedantic
N: Show-Always: no
N: Check: files/source-missing
I was told by some Debian mentors to ask you about a minified version of textual.js and to ask you if you're okay with using a non minified one
Making these changes will not only make it easier for distribution on Debian but also for other Linux distributions.
I'm hoping I can get a response from you soon.
Regards,
SpaciousCoder78
Debian Contributor
Metadata
Metadata
Assignees
Labels
No labels