[Vtigercrm-commits] [vtiger development] #1416: Create DEPENDENCIES.TXT to maintain list of snapshoted packages in codebase

[vtiger development]

#1416: Create DEPENDENCIES.TXT to maintain list of snapshoted packages in codebase
---------------------------------------------------------------------------+
 Reporter:  jeffk                                                          |       Owner:  jeffk
     Type:  enhancement                                                    |      Status:  new  
 Priority:  minor                                                          |   Milestone:  5.0.0
Component:  vtigercrm                                                      |     Version:  5.0.0
 Keywords:  dependencies packaging libraries php javascript distributions  |  
---------------------------------------------------------------------------+
 vtigercrm currently bundles snapshots of several external php and
 javascript libraries. Many of these libraries are unmodified copies. Some
 have had local modifications made to fix vtigercrm issues.

 Some or all distributions will prefer to package vtigercrm without
 including snapshotted libraries which are otherwise available as system
 packaged libraries.

 A good example of this is adodb. Since security updates are sometimes
 released for this database library, the distribution packagers will want
 to use their own system package as the one and only adodb installed on the
 system. An insecure version of adodb could have implications for the
 entire database backend, not just vtigercrm's database.

 To assist packagers, we should maintain a DEPENDENCIES.TXT file, listing
 the exact version of each snapshotted library. Additional information.

 The secondary use of this library will be to enable vtigercrm developers
 to identify, unmodify and eventually remove snapshotted libraries from the
 codebase.

 The ideal end result is a supplemental/convenience download package that
 contains all library dependencies of a vtigercrm release. Systems which
 can meet these prerequisites entirely through their system packageing will
 not need to distribute this file as part of the vtigercrm package.

 I will start this DEPENDENCIES.txt file in the trunk and 4.2 branch. The
 initial tab-separated listing format:
 {{{
 #pkg    pkgvers relpath statusmodified  statusexternaldep       dowloadurl
 adodb   adodb-4.90      /adodb  false        unknown
 http://prdownloads.sourceforge.net/adodb/adodb490.tgz
 }}}
 is highly open to suggestion. Please modify the format and add to the
 listings as you see fit.

  * pkg: versionless package name as defined by the original project
  * pkgvers: versioned package name as defined by the original project
  * relpath: vtigercrm root relative pathname of snapshot library
  * statusmodified: true/false/unknown indicator of any modifications to
 library release version
  * statusexternaldep: true/false/unknown indicator of whether vtigercrm
 can work with this library removed from relpath, but available on system
 PHP path (e.g. system packaging)
  * downloadurl: direct download URL for specific library release version,
 wget-able URL if possible.

-- 
Ticket URL: <http://vtiger.fosslabs.com/cgi-bin/trac.cgi/ticket/1416>
vtiger development <http://vtiger.fosslabs.com/>
vtigerCRM