Alec Leamas wrote:
The standard questions:
- Yes, the library has been modified. The overall diff is >6000 lines,
baselined w latest svn version.
- Ilya, the Bombono developer, has been in contact w John Torjo, the
author of the package. As I understand the situation, John torjo has
lost interest in it when it was rejected from inclusion in boost core.
He has not made any attempts to fix things after 2008, including input
from Ilya.
- The package does not exist in Fedora, no maintainer to discuss with.
- The 'bombono version' is of no interest to others as explained above,
nor is the unpatched original sources.
- Upstream is dead.
- Upstream's attitude towards bundling is unknown.
- This is a logging package, basically stream io to files and console.
I see no immediate security concerns in this type of software(?)
- The plan is to unbundle the package when boost-log becomes part of
boost. This should be a minor fix.
I'm usually the bundling police ;-) , but considering all of the above, I
agree that an exception seems warranted here. (And I see Hans, who
definitely has more authority here on RPM Fusion than me, agrees.)
Kevin Kofler