Review: bazel-rules-proto-grpc-cpp 5.8.0-1

Package Information

Description	C++ Protobuf and gRPC rules for Bazel rules_proto_grpc_cpp provides Bazel rules for building C++ protocol buffer and gRPC code and libraries from proto_library targets. It generates C++ protobuf (.pb.h, .pb.cc) and gRPC (.grpc.pb.h, .grpc.pb.cc) files using the protoc and grpc_cpp_plugin tools.
Maintainer	Debian Bazel Team <team+bazel@tracker.debian.org>
Changed By	Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
Sponsor	paulliu@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/bazel-team/bazel-rules-proto-grpc-cpp.git (browse)
Closes	#1152140
Tracker	https://tracker.debian.org/pkg/bazel-rules-proto-grpc-cpp
Uploaded	11 days ago

New Package Report

.changes◂

Changed-By	Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
Architecture	source all
Distribution	unstable
Date	Mon, 14 Sep 2026 13:09:50 +0000
Source	bazel-rules-proto-grpc-cpp
Version	5.8.0-1

Changelog◂

bazel-rules-proto-grpc-cpp (5.8.0-1) unstable; urgency=low
 .
   * Initial release (Closes: #1152140)

.dsc◂

Priority	optional
Component	main
Package-List	bazel-rules-proto-grpc-cpp deb devel optional arch=all
Section	devel

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: rules_proto_grpc_cpp
Source: https://github.com/rules-proto-grpc/rules_proto_grpc

Files: *
Copyright: 2018-2019 PCJohnstone / stackb
           2019-2026 Adam Liddell <adam@rules-proto-grpc.com>
           2019-2026 rules_proto_grpc Authors
License: Apache-2.0
Comment:
 In source code we are hard to see the author's name. It is appears on
 the web page. https://rules-proto-grpc.com/

Files: debian/*
Copyright: 2026 Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
License: Apache-2.0

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
 http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 On Debian systems, the complete text of the Apache version 2.0 license
 can be found in "/usr/share/common-licenses/Apache-2.0".

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 11 days ago.

Report◂

DFSG NEW review for bazel-rules-proto-grpc-cpp version 5.8.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 and agrees with the tree: the eight upstream files are Apache-2.0 under the holders it names, the debian/ files (including debian/tests and its artifacts) are covered by their own later stanza, and the stand-alone Apache-2.0 paragraph plus the /usr/share/common-licenses/Apache-2.0 pointer satisfy Policy 12.5. No non-free wording, no unnamed holder (the prescan agrees), no file that needs a different licence. The only caveat is that the tarball carries no LICENSE or licence notice of its own, so the Apache-2.0 statement rests on upstream's published licence; that is normal for such rule sets and not a fault in the packaging.

Packaging

A small arch:all data package: debhelper compat 13, one DEP-3 patch that retargets the rules at Debian's protoc/grpc_cpp_plugin and system protobuf/gRPC libraries, all eight upstream files installed under /usr/share/bazel/rules/proto_grpc_cpp exactly as README.Debian documents, dependencies that all exist in the archive, Standards-Version 4.7.4 (Policy 4.7.4.1), and an autopkgtest that builds and runs a proto and a gRPC client/server through the installed module. Nothing needs fixing.

Issues

None.

Verified ◂

All eight upstream files read in full (BUILD.bazel, MODULE.bazel, WORKSPACE, defs.bzl, cpp_proto_compile.bzl, cpp_proto_library.bzl, cpp_grpc_compile.bzl, cpp_grpc_library.bzl): none carries a copyright or licence notice, and nothing contradicts Apache-2.0.
grep over the whole tree for copyright, licen[cs]e, SPDX, all rights reserved, public domain (gitignore false) matches only debian/copyright and one test line naming the rules_license module; the upstream sources contain no notices to compare.
Orig tarball listing (rules_proto_grpc_cpp-5.8.0/) is exactly the same eight files, with no LICENSE/COPYING/NOTICE/README; the .debian.tar.xz holds exactly the debian/ files reviewed.
debian/copyright: correct Format: URL, Files: * followed by an overriding Files: debian/*, one stand-alone License: Apache-2.0 paragraph with the notice and the /usr/share/common-licenses pointer; prescan reports every holder found is named.
debian/install lists exactly the eight upstream files into ${env:INSTALL_PATH} = /usr/share/bazel/rules/proto_grpc_cpp, matching README.Debian; ${env:...} substitution in a file list is supported from compat 13 (debhelper(7)) and the package is at 13, and dh_install accepts the absolute destination (installs under debian/bazel-rules-proto-grpc-cpp/usr/...).
debian/patches: single DEP-3 patch (Description/Author/Forwarded/Last-Update) that replaces @grpc//src/compiler:grpc_cpp_plugin with a /usr/bin/grpc_cpp_plugin wrapper, points GRPC_DEPS/PROTO_DEPS at local //:protobuf and //:grpc++, and drops the grpc/protobuf bazel_dep lines; nothing obsolete.
Standards-Version 4.7.4 against the reviewing system's Policy 4.7.4.1 (policy tool) — first two components match, not an issue.
apt-cache: bazel-rules-cc 0.0.11-3, bazel-rules-proto-grpc 5.8.0-2, protobuf-compiler-grpc, bazel-bootstrap 7.7.1, bazel-rules-shell 0.4.0-1, bazel-skylib, bazel-aspect-bazel-lib, bazel-stardoc and bazel-rules-rust all exist; the autopkgtest Depends are satisfiable.
autopkgtest spec: tests run with cwd = source root, so test-001's cp -r debian/tests/test-001-artifacts/* works, and it keeps all writes in $AUTOPKGTEST_TMP with proxies pointed at 127.0.0.1:9.
debian/changelog: 5.8.0-1, unstable, initial release closing the ITP #1152140, date in the past relative to today.
uscan found the packaged version as the newest upstream release (upstream 5.8.0, packaged 5.8.0).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed ◂

The /usr/share/bazel/... paths the autopkgtest overrides (rules/cc, rules/proto_grpc, tools/skylib, tools/stardoc, rules/rust, rules/shell, ...) could not be verified: none of the bazel packages is installed on the reviewing system.
Upstream's Apache-2.0 status cannot be verified from the package itself: neither the orig tarball nor the tree has a LICENSE file or any licence notice, so it rests on upstream's website/BCR metadata.
README.Debian says overriding only rules_proto_grpc_cpp lets Bzlmod users work offline, but the installed MODULE.bazel still has bazel_dep on rules_cc 0.2.11 and rules_proto_grpc 5.8.0; whether Debian's bazel resolves those locally or needs further --override_module flags could not be checked here.

Proposed changes ◂

None.

Review Information

accepted — allocated to awm 11 days ago, started 11 days ago, completed 11 days ago.

Final Comment

Other Reviews of this Package

Version	Hash	Allocated	Completed	Reviewer	Status	Details
5.8.0-1	71e24934…	2026-10-27 12:10	2026-10-27 12:10	dfsg-uploader	rejected	VIEW

Back to Dashboard | View all reviews for this package