vaultwarden-web-vault: Add to TODO

[Greg Troxel <gdt%lexort.com@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Greg Troxel <gdt%lexort.com@localhost>
Pushed By:	gdt
Date:		Fri Jul 21 12:48:00 2023 -0400
Changeset:	3025a228c457cedb908e07ba8412ecc611c10985

Modified Files:
	vaultwarden-web-vault/TODO

Log Message:
vaultwarden-web-vault: Add to TODO

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=3025a228c457cedb908e07ba8412ecc611c10985

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 vaultwarden-web-vault/TODO | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diffs:
diff --git a/vaultwarden-web-vault/TODO b/vaultwarden-web-vault/TODO
index a622c0ac8c..413b218d52 100644
--- a/vaultwarden-web-vault/TODO
+++ b/vaultwarden-web-vault/TODO
@@ -1 +1,14 @@
 Make this actually work; this is just an intermediary commit.
+
+Figure out how this relates to the web server that is optional in
+security/vaultwarden.  Probably there should be only one way to get a
+web server, or there should be a way to get original vs patched in a
+parallel way.  The answer might be adding this package and dropping
+the web server from security/vaultwarden, but I don't want to jump to
+conclusions in a TODO entry.
+
+Adjust DESCR to make it clear that this is downloading precompiled js,
+vs building the bits to be downloaded from source.  I'm not saying
+that is terrible, but this is pkgsrc not pkgbin so users should
+understand that from DESCR.  Or if I'm confused and that's not what's
+going on, add enough text to unconfuse people like me :-)