[Bug 308465] Re: MIR for slugimage, uboot-mkimage and apex

[Steve Kowalik]

MIR for apex:

 * Availability:  http://archive.ubuntu.com/ubuntu/pool/universe/a/apex; available for all architectures
 * Rationale: Build dependency of apex
 * Security:
   - http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=apex ; None related to the package in request
   - http://secunia.com/search/?search=apex ; None
   - It's a boot loader, so a binary or two running as root. Also deals with firmware, which is binary data.
   - No network, etc, hand-wave.
   - No source code review
 * Quality Assurance:
    - Package works out of the box
    - No debconf
    - http://bugs.debian.org/src:apex ; No real showstopper bugs
    - Maintenance in Debian is dead
    - Upstream is http://wiki.buici.com/wiki/Apex_Bootloader ; looks calm
    - Deals with NSLU2, a fairly cheap and common ARM machine
    - No test suite
 * UI standards:
    - It uses gettext.
 * Standards compliance
    - Complies to Debian Policy
    - No libraries.
    - Packaging system is bog-standard debhelper, no oddities.
  * Dependencies:
     - Requires devio
  * Maintenance
     - Should take care of itself
     - Upstream maintains package in Debian.

-- 
MIR for slugimage, uboot-mkimage, devio and apex
https://bugs.launchpad.net/bugs/308465
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs