DFSG NEW review for dart-fake-async version 1.3.3-1

Summary

• Licensing is DFSG-compliant and debian/copyright is accurate: Yes
• Packaging is of good quality: Yes
• Issues: 0 blocker, 0 important, 0 minor
• debian/watch: version 5
• debian/copyright: machine-readable
• Scan before the review: nothing found

Licensing

All eight upstream files are Apache-2.0 with Google Inc. as the only holder, and debian/copyright is in DEP-5 format with accurate stanzas: Files: * for the upstream tree (Copyright: 2014, Google Inc.), Files: debian/* for the packaging (Emfox Zhou), and a stand-alone Apache-2.0 paragraph pointing at /usr/share/common-licenses/Apache-2.0. No non-free terms, no unlicensed file, no vendored third-party code and no built artifacts whose source is absent.

Packaging

Clean, current packaging: debhelper compat 14 with dh-sequence-single-binary, a three-line rules that only fixes directory mtimes, correct source-only install under /usr/share/dart/packages/fake_async, dependencies that match the library's actual imports (clock, collection), an offline autopkgtest smoke test, debian/upstream/metadata and gbp.conf, and Standards-Version 4.7.4, which is current.

Issues

None.

Verified

• The upstream tree is exactly AUTHORS, CHANGELOG.md, LICENSE, README.md, analysis_options.yaml, lib/fake_async.dart, pubspec.yaml and test/fake_async_test.dart, the same set the .orig tarball lists; nothing is missing from the unpacked tree.
• A case-sensitive grep for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU ... General Public, Apache License, Mozilla Public, public domain and All rights reserved over the whole tree (gitignore off) found only Copyright 2014 Google Inc. All Rights Reserved. plus the Apache-2.0 header in lib/fake_async.dart:1-9 and test/fake_async_test.dart:1-12, the Apache text in LICENSE, Google Inc. in AUTHORS:6, and debian/copyright itself. That matches debian/copyright:6 (Copyright: 2014, Google Inc.).
• debian/copyright:9-11 covers the packaging files as Apache-2.0 by Emfox Zhou; every debian/ file (changelog, control, copyright, docs, gbp.conf, install, rules, watch, source/format, tests/control, tests/smoke, upstream/metadata) is matched by that stanza, which comes after Files: * and therefore overrides it.
• The prescan found no built files, minified code, archives, PDFs or binary blobs, and the file inventory contains none: the only non-text file is LICENSE; there are no images, fonts or sounds to judge.
• The prescan's holder check reported no holder missing from debian/copyright; AUTHORS names only Google Inc., which the copyright file names.
• lib/fake_async.dart:15-19 imports only dart:async, dart:collection, package:clock/clock.dart and package:collection/collection.dart, so Depends: dart-clock, dart-collection in debian/control is complete and not redundant.
• pubspec.yaml requires clock: ^1.1.0 and collection: ^1.15.0; apt-cache shows dart-clock 1.1.3-1 and dart-collection 1.19.1-2 in unstable, both satisfying those constraints, and both are Architecture: all / Multi-Arch: foreign like this package.
• Build-Depends: dh-sequence-single-binary resolves: apt-cache shows it is a virtual package provided by debhelper 14.5, i.e. by the debhelper that debhelper-compat (= 14) selects.
• rules' touch -d "@$${SOURCE_DATE_EPOCH}" is safe in a real build: the dpkg-buildpackage(1) man page (ENVIRONMENT) states SOURCE_DATE_EPOCH is set to the changelog timestamp if not already defined.
• debian/tests/control runs Tests: smoke (debian/tests/smoke) with Depends: @, dart-sdk, which provides the dart binary; the script builds a package_config.json from the installed /usr/share/dart/packages/* entries and runs a Timer/elapse program offline, and needs only the dependencies @ pulls in.
• Standards-Version 4.7.4 against the reviewing system's Policy (4.7.4.x) is current; source format 3.0 (quilt) with no debian/patches is consistent with an unpatched upstream tarball, and the changelog entry (unstable, 1.3.3-1, signed-off date Mon 26 Oct 2026, Closes: #1152038) is sane.
• debian/upstream/metadata and debian/gbp.conf were read; the metadata points at the upstream repository and issue tracker, and gbp.conf configures debian/latest, upstream/latest and pristine-tar. No maintainer scripts, no .maintscript, no patches, no man pages, no -doc package.
• uscan found the packaged version as the newest upstream release (upstream 1.3.3, packaged 1.3.3).
• Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed

• The autopkgtest was not executed here, as the package cannot be built or run in this review; whether dart run accepts the hand-written .dart_tool/package_config.json (whose rootUri values have no trailing slash) was not verified.

Proposed changes

None.