Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace sxd_document with an adequate alternative, e.g. xml-rs #1702

Closed
nc7s opened this issue Jun 30, 2023 · 2 comments
Closed

Replace sxd_document with an adequate alternative, e.g. xml-rs #1702

nc7s opened this issue Jun 30, 2023 · 2 comments
Labels
enhancement New feature or request

Comments

@nc7s
Copy link

nc7s commented Jun 30, 2023

I'm looking into packaging hurl for Debian. The hurl_core crate depends on sxd_document, a long inactive crate that depends on another long inactive crate peresil and an extremely old version of typed-arena. All sxd_document does there is to provide a is_valid() function, matching its output to Ok(_).

I suggest xml-rs, a widely used XML library with no dependency, already packaged in Debian.

@nc7s nc7s added the enhancement New feature or request label Jun 30, 2023
@nc7s nc7s changed the title Replace sxd_document with a modern alternative, e.g. xml-rs Replace sxd_document with an adequate alternative, e.g. xml-rs Jun 30, 2023
@jcamiel
Copy link
Collaborator

jcamiel commented Jun 30, 2023

Hi, first of all thank you for looking into Debian packaging. We're a bit stuck on this, we've struggled to start and need some help on this for sure (see #366).
Nice catch for sxd_document, we'll see how to remove the dependency asap indeed.
Some thing to know: we have two depedencies that may need a bit of work for a proper Debian package:

  • curl-rust which is a binding to curl
  • libxml which is a binding to libxml (for evaluating XPath expression).

A part from these core dependencies, don't hesitate to make issues if you see other dependencies that could be remove / replaced to make a Debian package easier.

@nc7s
Copy link
Author

nc7s commented Jun 30, 2023

I'm not asking to replace it because it's not in Debian ;) but rather, it's long inactive (aka unmaintained) and has a higher chance of being vulnerable (especially so handling XML). We are happy to package the deps as long as they are useful.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants