In spec 1.9.0, there's still a section 14.7 Libraries Still Under Review. Before 2.0, we need to complete this "review" - items should move to required, be dropped, or moved to Requested / Future Directions area.
In addition, there are many libraries that are required by the garage applications that should be reviewed.
[details] Moblin Garage Applications -- Missing Libraries. The ISV app checker was run against the Moblin garage OSS applications. The libraries that were not found in compliance are listed here. Garage: http://garage.moblin.org/garage The following applications library dependencies were met (good news): blogtk extremetuxracer firefox gcompris gnome-glines gnome-gnobots2 gnome-gnometris gnome-gnotravex gnome-gsudoku gnome-gtali gnome-mahjongg gnome-same-gnome scribus Thunderbird
First, some general comments: 1) Probably bugzilla is not the best place to track analysis of ~50 applications, maybe we can set up some document in google docs instead? 2) Some results from the spreadsheet look strange; it is actually unclear what rpms/packages were subjected to analysis (see point 3-5 below). The situation would be more clear if we have access to the full AppChecker reports. Some comments on the garage apps and the list attached: 1) blogtk and gnome-gsudoku are pure Python applications. No wonder that they are marked as compliant now, but there will be problems here if we add a checker for used Python modules - these apps used modules that are not mentioned in the specification. In addition, Scribus also has some Pythons parts. 2) foobillard required libXaw.so.7, but it doesn't use any interfaces from it/ Probably there is a way to contact developers (or those guys who build packages fro Garage) and to recommend to drop this dependency? 3) postr and gnome-glchess are also pure Python applications, as far as I can say. postr is even packaged into 'noarch' rpm. However, the spreadsheet attached says that postr uses libcrypto, and gnome-glchess uses libXmu. I wonder what files were actually analyzed for these two apps by spreadsheet authors? Neither postr rpm nor gnome-glchess one have ELF files that could have such dependencies... 4) According to the spreadsheet, gnome-blackjack uses a lot of non-Moblin libs (arts_gpl, k5crypto, etc.). However, AppChecker results obtained by our engineers on the gnome-blackjack rpm taken from the garage don't contain any of the failures mentioned. 5) Similar to the previous point, marble is reported to require libcrypto and libssl. But I can't see any files in the marble rpm that contain these requirements. 6) f-spot and banshee are actually .NET applications. This area is not covered by the spec at all at the moment... 7) There is an interesting issue with the WorldOfGooDemo rpm provided by the garage. It contains both 32bit and 64bit files; the AppChecker don't allow 64bit files to be present and reports failures. What should we do here? I'd say there is no much sense to have 64bit executables on a pure 32bit platform.
Hmm, the more I look at the spreadsheet attached the more strange things I see. For example, kapman is a small kde game. According to our analysis, it only uses Qt4, kde4 and stdc++ libraries. However, according to the spreadsheet, this game depends on 16 non-Moblin libs, including ncurses, libacl, libattr, libcurl, libdb, libenchant, etc. One issue of another kind - libtotem-plparser.so.12 is mentioned as totem dependency; but I'd say that this library is actually a part of totem (though provided by a separate package).