Debian Bug report logs - #681676
RFP: node-jslint -- javascript code quality tool that aims to catch basic errors

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Reported by: Paul Tagliamonte <paultag@debian.org>

Date: Sun, 15 Jul 2012 13:48:01 UTC

Severity: wishlist

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, paultag@debian.org:
Bug#681676; Package wnpp. (Sun, 15 Jul 2012 13:48:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Paul Tagliamonte <paultag@debian.org>:
New Bug report received and forwarded. Copy sent to wnpp@debian.org, paultag@debian.org. (Sun, 15 Jul 2012 13:48:04 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Paul Tagliamonte <paultag@debian.org>
To: submit@bugs.debian.org
Subject: ITP: node-jslint -- javascript code quality tool that aims to catch basic errors
Date: Sun, 15 Jul 2012 09:47:40 -0400
[Message part 1 (text/plain, inline)]
Package: wnpp
Severity: wishlist
Owner: paultag@debian.org

* Package name    : node-jslint
  Version         : 0.1.8
  Upstream Author : Reid Burke <me@reidburke.com>
* URL             : https://github.com/reid/node-jslint
* License         : BSD-3 & MIT
  Programming Lang: nodejs
  Description     : javascript code quality tool that aims to catch basic errors

node-jslint (sometimes just called jslint) is a widly used and popular
javascript linting tool. Common use includes running it over code
manually, or integrating it into to build process (almost like -Wall /
-Werror is used with gcc interface compatible compilers) to ensure
that the code lints properly.

-- 
 .''`.  Paul Tagliamonte <paultag@debian.org>
: :'  : Proud Debian Developer
`. `'`  4096R / 8F04 9AD8 2C92 066C 7352  D28A 7B58 5B30 807C 2A87
 `-     http://people.debian.org/~paultag
[signature.asc (application/pgp-signature, inline)]

Added tag(s) pending. Request was from Paul Tagliamonte <paultag@debian.org> to control@bugs.debian.org. (Sun, 15 Jul 2012 16:09:11 GMT) Full text and rfc822 format available.

Reply sent to Paul Tagliamonte <paultag@debian.org>:
You have taken responsibility. (Wed, 08 Aug 2012 20:03:04 GMT) Full text and rfc822 format available.

Notification sent to Paul Tagliamonte <paultag@debian.org>:
Bug acknowledged by developer. (Wed, 08 Aug 2012 20:03:04 GMT) Full text and rfc822 format available.

Message #12 received at 681676-done@bugs.debian.org (full text, mbox):

From: Paul Tagliamonte <paultag@debian.org>
To: 681676-done@bugs.debian.org
Subject: non-dfsg free
Date: Wed, 8 Aug 2012 16:01:11 -0400
[Message part 1 (text/plain, inline)]
The ole' do-no-evil clause.

Le sigh.

Too bad we won't be able to use this useful software.

Closing this ITP.

evil-ey yours,
  Paul

-- 
 .''`.  Paul Tagliamonte <paultag@debian.org>
: :'  : Proud Debian Developer
`. `'`  4096R / 8F04 9AD8 2C92 066C 7352  D28A 7B58 5B30 807C 2A87
 `-     http://people.debian.org/~paultag
[signature.asc (application/pgp-signature, inline)]

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 06 Sep 2012 07:28:13 GMT) Full text and rfc822 format available.

Bug unarchived. Request was from Daniel Pocock <daniel@pocock.com.au> to control@bugs.debian.org. (Wed, 04 Sep 2013 12:12:04 GMT) Full text and rfc822 format available.

Bug reopened Request was from Daniel Pocock <daniel@pocock.com.au> to control@bugs.debian.org. (Wed, 04 Sep 2013 12:12:05 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, paultag@debian.org:
Bug#681676; Package wnpp. (Wed, 04 Sep 2013 12:18:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Daniel Pocock <daniel@pocock.com.au>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, paultag@debian.org. (Wed, 04 Sep 2013 12:18:04 GMT) Full text and rfc822 format available.

Message #23 received at 681676@bugs.debian.org (full text, mbox):

From: Daniel Pocock <daniel@pocock.com.au>
To: 681676@bugs.debian.org
Subject: repackaged upstream tarball solution?
Date: Wed, 04 Sep 2013 14:15:40 +0200

A lot of upstreams use this tool or jshint during their build,
particularly due to systems like grunt encouraging it in their docs

To save time for other maintainers, why not package a repackaged
upstream tarball?

Just strip out everything with the "no evil" clause

None of the logic is mandatory for a build process anyway, this is just
a QA tool

If there are no warnings left at all, then I suppose the tool could just
spit out a message like the following:

    Warning: your build script depends on a non-free tool.  Please stop
calling jslint or set JSLINT_EVIL_IGNORE=1 to make this message go away

If Mr Crockford really wants people to consider the advice that his tool
gives about JavaScript coding practices, then he will release the code
under a free software license and then all the other stuff will work the
way he wants it to.





Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, paultag@debian.org:
Bug#681676; Package wnpp. (Wed, 04 Sep 2013 12:24:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Paul Tagliamonte <paultag@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, paultag@debian.org. (Wed, 04 Sep 2013 12:24:04 GMT) Full text and rfc822 format available.

Message #28 received at 681676@bugs.debian.org (full text, mbox):

From: Paul Tagliamonte <paultag@debian.org>
To: Daniel Pocock <daniel@pocock.com.au>, 681676@bugs.debian.org
Subject: Re: Bug#681676: repackaged upstream tarball solution?
Date: Wed, 4 Sep 2013 08:33:15 -0400
[Message part 1 (text/plain, inline)]
On Wed, Sep 04, 2013 at 02:15:40PM +0200, Daniel Pocock wrote:
> A lot of upstreams use this tool or jshint during their build,
> particularly due to systems like grunt encouraging it in their docs

Yep. I like jshint. In fact, I co-work with the guy that wrote grunt.
Which is why I had this ITP open.

> To save time for other maintainers, why not package a repackaged
> upstream tarball?
> 
> Just strip out everything with the "no evil" clause

The thing is, jshint *it's self* is under that license. If you strip it
out, there's no code :)

> None of the logic is mandatory for a build process anyway, this is just
> a QA tool

D'oh :)

Perhaps check the terms of the jshint library.

> 
> If there are no warnings left at all, then I suppose the tool could just
> spit out a message like the following:
> 
>     Warning: your build script depends on a non-free tool.  Please stop
> calling jslint or set JSLINT_EVIL_IGNORE=1 to make this message go away
> 
> If Mr Crockford really wants people to consider the advice that his tool
> gives about JavaScript coding practices, then he will release the code
> under a free software license and then all the other stuff will work the
> way he wants it to.

He gives talks about how stupid everyone is for wanting a tool that does
evil. He's not going to change his mind.

There's a jshint-ng that's under MIT/Expat under development. I've not
checked on it in a while, but perhaps it's nice now?

This might also be good for non-free, I just didn't have the time to
play with non-free code (or maintain it)

Thanks for looking into this tool,
  Paul


-- 
 .''`.  Paul Tagliamonte <paultag@debian.org>
: :'  : Proud Debian Developer
`. `'`  4096R / 8F04 9AD8 2C92 066C 7352  D28A 7B58 5B30 807C 2A87
 `-     http://people.debian.org/~paultag
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, paultag@debian.org:
Bug#681676; Package wnpp. (Wed, 04 Sep 2013 12:36:18 GMT) Full text and rfc822 format available.

Acknowledgement sent to Daniel Pocock <daniel@pocock.com.au>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, paultag@debian.org. (Wed, 04 Sep 2013 12:36:18 GMT) Full text and rfc822 format available.

Message #33 received at 681676@bugs.debian.org (full text, mbox):

From: Daniel Pocock <daniel@pocock.com.au>
To: Paul Tagliamonte <paultag@debian.org>
Cc: 681676@bugs.debian.org
Subject: Re: Bug#681676: repackaged upstream tarball solution?
Date: Wed, 04 Sep 2013 14:35:54 +0200
On 04/09/13 14:33, Paul Tagliamonte wrote:
> On Wed, Sep 04, 2013 at 02:15:40PM +0200, Daniel Pocock wrote:
>> A lot of upstreams use this tool or jshint during their build,
>> particularly due to systems like grunt encouraging it in their docs
> Yep. I like jshint. In fact, I co-work with the guy that wrote grunt.
> Which is why I had this ITP open.
>
>> To save time for other maintainers, why not package a repackaged
>> upstream tarball?
>>
>> Just strip out everything with the "no evil" clause
> The thing is, jshint *it's self* is under that license. If you strip it
> out, there's no code :)
>
>> None of the logic is mandatory for a build process anyway, this is just
>> a QA tool
> D'oh :)
>
> Perhaps check the terms of the jshint library.

JSHint is just as difficult to work with

They refactored the code but it seems like they did so in ignorance of
this issue, cutting and pasting code that is under the "no evil"
license, and Mr Crockford has them over a barrel:

https://github.com/jshint/jshint/issues/1234#issuecomment-23187063

>
>> If there are no warnings left at all, then I suppose the tool could just
>> spit out a message like the following:
>>
>>     Warning: your build script depends on a non-free tool.  Please stop
>> calling jslint or set JSLINT_EVIL_IGNORE=1 to make this message go away
>>
>> If Mr Crockford really wants people to consider the advice that his tool
>> gives about JavaScript coding practices, then he will release the code
>> under a free software license and then all the other stuff will work the
>> way he wants it to.
> He gives talks about how stupid everyone is for wanting a tool that does
> evil. He's not going to change his mind.

I never suggested it was guaranteed to work.  Maybe once he realises how
effectively everybody is working around this he will change his mind to
try and regain some ground, maybe not.

However, just displaying such a warning to users of the tool would help
illuminate the wider community about the dangers of poor licensing and
hopefully other people won't end up like the JSHint team

> There's a jshint-ng that's under MIT/Expat under development. I've not
> checked on it in a while, but perhaps it's nice now?
>
> This might also be good for non-free, I just didn't have the time to
> play with non-free code (or maintain it)
>

Can you comment how you think packages should use the tool to make it as
convenient as possible for maintainers not to care which one is on a
given system?

E.g. have a virtual package jslint which is provided by all of:

jslint-nonfree          (in nonfree)
jshint                      (in nonfree)
jshint-ng                 (eventually in main)
jslint-one-warning   (which just gives the warning described above)





Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, paultag@debian.org:
Bug#681676; Package wnpp. (Wed, 04 Sep 2013 19:24:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Paul Tagliamonte <paultag@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, paultag@debian.org. (Wed, 04 Sep 2013 19:24:04 GMT) Full text and rfc822 format available.

Message #38 received at 681676@bugs.debian.org (full text, mbox):

From: Paul Tagliamonte <paultag@debian.org>
To: Daniel Pocock <daniel@pocock.com.au>
Cc: 681676@bugs.debian.org
Subject: Re: Bug#681676: repackaged upstream tarball solution?
Date: Wed, 4 Sep 2013 15:33:24 -0400
[Message part 1 (text/plain, inline)]
On Wed, Sep 04, 2013 at 02:35:54PM +0200, Daniel Pocock wrote:
> > Perhaps check the terms of the jshint library.
> 
> JSHint is just as difficult to work with
> 
> They refactored the code but it seems like they did so in ignorance of
> this issue, cutting and pasting code that is under the "no evil"
> license, and Mr Crockford has them over a barrel:

Erm, jslint* in my original mail, but yeah, totally agree.

> > He gives talks about how stupid everyone is for wanting a tool that does
> > evil. He's not going to change his mind.
> 
> I never suggested it was guaranteed to work.  Maybe once he realises how
> effectively everybody is working around this he will change his mind to
> try and regain some ground, maybe not.

When pressured, he granted IBM "A license for them and any of their
customers to do evil with jslint". IBM gets mocked in such rants.

> However, just displaying such a warning to users of the tool would help
> illuminate the wider community about the dangers of poor licensing and
> hopefully other people won't end up like the JSHint team

Aye!

> 
> > There's a jshint-ng that's under MIT/Expat under development. I've not
> > checked on it in a while, but perhaps it's nice now?
> >
> > This might also be good for non-free, I just didn't have the time to
> > play with non-free code (or maintain it)
> >
> 
> Can you comment how you think packages should use the tool to make it as
> convenient as possible for maintainers not to care which one is on a
> given system?
> 
> E.g. have a virtual package jslint which is provided by all of:
> 
> jslint-nonfree          (in nonfree)
> jshint                      (in nonfree)
> jshint-ng                 (eventually in main)
> jslint-one-warning   (which just gives the warning described above)

Seems pretty sane to me - I think they might even share an interface!

Thanks for working on this tool -- I've got some packaging sitting
around (I distribute jslint for myself still -
http://archive.pault.ag/pool/main/n/node-jslint/) - but I can't remember
in what shape the packaging is.

Fondly,
  Paul

-- 
 .''`.  Paul Tagliamonte <paultag@debian.org>
: :'  : Proud Debian Developer
`. `'`  4096R / 8F04 9AD8 2C92 066C 7352  D28A 7B58 5B30 807C 2A87
 `-     http://people.debian.org/~paultag
[signature.asc (application/pgp-signature, inline)]

Removed annotation that Bug was owned by paultag@debian.org. Request was from Paul Tagliamonte <leliel@pault.ag> to control@bugs.debian.org. (Sun, 01 Dec 2013 14:42:09 GMT) Full text and rfc822 format available.

Changed Bug title to 'RFP: node-jslint -- javascript code quality tool that aims to catch basic errors' from 'ITP: node-jslint -- javascript code quality tool that aims to catch basic errors' Request was from Mònica Ramírez Arceda <monica@debian.org> to control@bugs.debian.org. (Tue, 21 Jan 2014 10:33:18 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Mon Apr 21 09:56:17 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.