#1125955 RFP: zotero -- Stores and synchronizes a bibliography between multiple users

#1125955#5
Date:
2026-01-19 13:05:11 UTC
From:
To:
* Package name    : zotero
  Version         : 7.0.32
  Upstream Contact: Dan Stillman
* URL             : https://github.com/zotero/zotero
* License         : AGPLv3
  Programming Lang: Javascript
  Description     : Stores and synchronizes a bibliography between multiple
users

This package would provide the end-user GUI tool that can be used to manipulate
a collection of documents.
It is mature software that would be convenient to install via APT on Debian,
instead of downloading it manually.

#1125955#10
Date:
2026-09-18 17:59:24 UTC
From:
To:
Hi Antonin,

I'd like to try to package zotero, and have retitled this RFP to ITP
and set myself as owner.

Work already done:

Dependency audit of the whole build: 4 npm projects (main tree plus 3
git submodules), 117 unique modules, 65 already in the archive, 52
missing, of which about 37 need real work.
Gecko side: Zotero is built on Firefox ESR. The upstream modify_omni
post-processing runs against the Debian firefox-esr install tree:
104/105 modifications apply unchanged, so no Firefox build is needed.
Five of the missing node modules (luaparse, sentencex-ts, fflate,
sorted-btree, eld) are packaged and awaiting NEW review.

Known difficulties:

The build needs a Mozilla Gecko runtime. Upstream ships a prebuilt
Firefox ESR and post-processes it; Debian cannot use a binary blob,
so the package will reuse the firefox-esr install tree and apply the
same post-processing (verified working, see above).
Several bundled dependencies are older than what Debian ships
(Babel 7 vs 8, TypeScript 5 vs 6). Per Policy 4.13 this means patches
to upstream, not vendored copies.
Upstream ships no ESR line and cuts a major release every 6-10 weeks;
the database format upgrades one-way. Stable releases will therefore
need an explicit upgrade/no-downgrade policy.

Regards,
Emfox Zhou