Debian Bug report logs - #956836
RFP: bitwarden -- fully open-source, cross-platform

Package: wnpp; Maintainer for wnpp is [email protected];

Reported by: Calum McConnell <[email protected]>

Date: Wed, 15 Apr 2020 19:21:01 UTC

Severity: wishlist

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#956836: Update: Bitwarden is a dependency headache
Reply-To: [email protected], [email protected]
Resent-From: [email protected]
Resent-To: [email protected]
Resent-CC: [email protected], Calum McConnell <[email protected]>
X-Loop: [email protected]
Resent-Date: Tue, 29 Sep 2020 17:00:06 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: followup 956836
X-Debian-PR-Package: wnpp
X-Debian-PR-Keywords: 
References: <158697828158.19750.13750857937220551644.reportbug@CalumsDebianSupreme.computercalum.com>
Received: via spool by [email protected] id=B956836.16013985993253
          (code B ref 956836); Tue, 29 Sep 2020 17:00:06 +0000
Received: (at 956836) by bugs.debian.org; 29 Sep 2020 16:56:39 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-13.3 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,FVGT_m_MULTI_ODD,
	MURPHY_DRUGS_REL8,PGPSIGNATURE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,
	SPF_PASS,TXREP,WORD_WITHOUT_VOWELS autolearn=ham autolearn_force=no
	version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 83; hammy, 150; neutral, 97; spammy,
	0. spammytokens: hammytokens:0.000-+--H*r:TLS1_3,
	0.000-+--H*u:Evolution, 0.000-+--tarballs, 0.000-+--H*ct:application,
	0.000-+--H*ct:protocol
Received: from mail-qt1-x842.google.com ([2607:f8b0:4864:20::842]:46955)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128)
	(Exim 4.92)
	(envelope-from <[email protected]>)
	id 1kNIvf-0000q0-1D
	for [email protected]; Tue, 29 Sep 2020 16:56:39 +0000
Received: by mail-qt1-x842.google.com with SMTP id r8so4100478qtp.13
        for <[email protected]>; Tue, 29 Sep 2020 09:56:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=message-id:subject:from:to:date:user-agent:mime-version;
        bh=3G/E5ZvyGb9YDXz2XpJ69AwuGyFOnFmPNtS2kOWjaMg=;
        b=edidh8VOV3ksY4rvhvQufkKG6xPrYkP7i9vBBGl9bAw5Li6EcbOh4A30JOwQgOvuua
         pP7z2Ylu7ApM9n7EtNpEzbBMLP0BWAhAcB0R0i+ZrRXaXwgblRd/hFgMuMjvT3HNwC8m
         nUmav3ASTQ9hvHli1fjGvRtD8RXXFtXerPZllatl42pAXtOUDEj9mCmfMjROLcmETmd4
         My7Zi/csLcL1+smwZhhEjBXYIUOXKv+1E6OHa8f/fIN2l6U5XM8qgRXhce7G7KrxwxHl
         uJpnGuhebBvO0T/AYIWWXwRN5PmtGQrpnq7nz7Rd0mhQ+XD2Z93JcNCMwsiJVfkuW2oo
         SVoA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:message-id:subject:from:to:date:user-agent
         :mime-version;
        bh=3G/E5ZvyGb9YDXz2XpJ69AwuGyFOnFmPNtS2kOWjaMg=;
        b=K3z7KeSARTmSCwpwZ7YJTzFF9Qt/Ff7G0bNfIu7KjMdGTQZr2391ThhP68oESeonoq
         I/qM0ebb8mpyZe+WZ5Dg0i+PP7WCFQMvvTZvd0Q2jLW+Aq0ZA6vTqr+ab49D0gbRe0Gp
         0ehAfoWKNl8mNIvPrC8Z06ica2nR3ZBfrDVraq5iLHcbuWqrHfvIYuGF0sGC3lVF3BCZ
         +GdMcJdxTT5n+GlQ1zEGpddHwayTjvQSYoOySA+H51IMdE0f/vd2lpwvCe8mTJDjcnI2
         f8nRUCZ5D0j3IGiONwvBnPfTmB4tXind6868t8iI2Ew0jBV30z/WO9pwJoCJrV9dfprP
         8EUA==
X-Gm-Message-State: AOAM533xcjLGL+CbWp4lg+GiMhP5N3n1h0isArpHIVxWBZl/KP/rYcRy
	jzivtJi+EE390h2nSSUVnOhBjd7bOhuz5w==
X-Google-Smtp-Source: ABdhPJymXJrjHKaAV122IoaT45+K7ptkloyNSLfvQqybi9k1lhgvs3ibMmiIOaVoo8vwINvubqbzBw==
X-Received: by 2002:ac8:47cf:: with SMTP id d15mr4296577qtr.197.1601398595925;
        Tue, 29 Sep 2020 09:56:35 -0700 (PDT)
Received: from CalumsBeastlyLaptop ([2600:8805:d480:eb70:91e2:513:edc5:976f])
        by smtp.gmail.com with ESMTPSA id w59sm6215846qtd.1.2020.09.29.09.56.34
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Tue, 29 Sep 2020 09:56:35 -0700 (PDT)
Message-ID: <[email protected]>
From: [email protected]
To: [email protected]
Date: Tue, 29 Sep 2020 12:56:32 -0400
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-HlvMS+0o3kcxkYcewtPD"
User-Agent: Evolution 3.36.4-2 
MIME-Version: 1.0

[Message part 1 (text/plain, inline)]
I figure I ought to post an update here.  It's not looking good.

There is a very nifty tool for repackaging node.js packages for Debian
(shockingly called npm2deb), however, it assumes upstream uploaded
their package to the npm registry.  The bitwarden upstream did not, as
it is a GUI application, and so they didn't know they even could.  They
did not want to, however.

I then patched npm2deb to handle packages that were only available as
tarballs (which I was quite proud of).  Though those changes have not
yet been merged in, they worked just fine-which was when I ran into the
showstopper.

Bitwarden has a long chain of dependencies, as it is an application
built on Angular.js and Electron.js.  npm2deb gave a list of 28
separate packages.  Although they are all node packages, and I am sure
npm2deb is up to the task, I am not sure if I could, or should, add
them all.  I pasted the relevant section of npm2deb output bellow.  

If someone could aid me in packaging and maintaining the dependent
packages, I'd be much more confident in continuing.  But I don't want
to wait for my 29th package to get one that I actually use.

(Obviously, many of these may be prepackaged, and just not be known to
npm2deb by their Debian name.  But there is a mechanism that attempts
to solve that (with a list that converts between them), and I assume it
is somewhat up-to-date.  Additionally, I did manually attempt to find
them with apt, and failed.)

[error]   @angular/animations: dependency node-@angular/animations not
in debian
 [error]   @angular/cdk: dependency node-@angular/cdk not in debian
 [error]   @angular/common: dependency node-@angular/common not in
debian
 [error]   @angular/compiler: dependency node-@angular/compiler not in
debian
 [error]   @angular/core: dependency node-@angular/core not in debian
 [error]   @angular/forms: dependency node-@angular/forms not in debian
 [error]   @angular/platform-browser: dependency node-@angular/platform
-browser not in debian
 [error]   @angular/platform-browser-dynamic: dependency node-@angular/
platform-browser-dynamic not in debian
 [error]   @angular/router: dependency node-@angular/router not in
debian
 [error]   @angular/upgrade: dependency node-@angular/upgrade not in
debian
 [error]   @microsoft/signalr: dependency node-@microsoft/signalr not
in debian
 [error]   @microsoft/signalr-protocol-msgpack: dependency 
node-@microsoft/signalr-protocol-msgpack not in debian
 [error]   @nodert-win10-rs4/windows.security.credentials.ui:
dependency node-@nodert-win10-rs4/windows.security.credentials.ui not
in debian
 [error]   angular2-toaster: dependency node-angular2-toaster not in
debian
 [error]   angulartics2: dependency node-angulartics2 not in debian
 [error]   big-integer: dependency node-big-integer not in debian
 [error]   desktop-idle: dependency node-desktop-idle not in debian
 [error]   duo_web_sdk: dependency node-duo_web_sdk not in debian
 [error]   electron-log: dependency node-electron-log not in debian
 [error]   electron-store: dependency node-electron-store not in debian
 [error]   electron-updater: dependency node-electron-updater not in
debian
 [error]   keytar: dependency node-keytar not in debian
 [error]   nord: dependency node-nord not in debian
 [error]   papaparse: dependency node-papaparse not in debian
 [error]   rxjs: dependency node-rxjs not in debian
 [error]   sweetalert2: dependency node-sweetalert2 not in debian
 [error]   zone.js: dependency node-zone.js not in debian
 [error]   zxcvbn: dependency node-zxcvbn not in debian


[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 14:30:23 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.