DFSG NEW review for dart-fake-async version 1.3.3-1

Summary

• Licensing is DFSG-compliant and debian/copyright is accurate: No
• Packaging is of good quality: Yes
• Issues: 1 blocker, 0 important, 0 minor
• debian/watch: version 5
• debian/copyright: machine-readable
• Scan before the review: nothing found

Licensing

The tree is uniformly Apache-2.0 and DFSG-compliant (LICENSE is the full Apache-2.0 text, files are unmodified source, no non-free terms, no built/binary/minified files), and debian/copyright is well-formed DEP-5. But the Files: * stanza misstates the copyright: it says "2019, the Dart project authors" while every notice in the source (lib/fake_async.dart:1, test/fake_async_test.dart:1) and AUTHORS says Google Inc., 2014. The holder Google Inc. is not named at all, so debian/copyright does not accurately describe the copyright.

Packaging

Packaging is clean and conventional for the dart-team source-shipping model: compat 14, dh-sequence-single-binary, arch:all Multi-Arch: foreign, sources installed under /usr/share/dart/packages/fake_async/, an autopkgtest smoke test, DEP-5 copyright, Vcs-*, gbp.conf and upstream/metadata present. Standards-Version 4.7.4 matches the current Policy (4.7.4.1). The only non-copyright doubt is dart-clock, which the archive tool cannot find, but that is not evidence of a fault.

Issues

1. [blocker] [licensing] Files: * names "the Dart project authors", but the source notices and AUTHORS name Google Inc. (2014)

• Files: debian/copyright:6, lib/fake_async.dart:1, test/fake_async_test.dart:1, AUTHORS
• Basis: checked, in the package or with a reference tool
• Evidence: debian/copyright Files: * / Copyright: 2019, the Dart project authors vs lib/fake_async.dart:1 and test/fake_async_test.dart:1 Copyright 2014 Google Inc. All Rights Reserved. and AUTHORS Google Inc.
• Problem: The copyright holder actually stated in the files (Google Inc.) is not named, and the named entity (the Dart project authors) appears nowhere in the package; the year also differs from the notices. copyright-format 1.0 s.5.2/6.6 require the Copyright field to record the holders named in the files, so the file does not accurately describe the copyright.
• Fix: Change the Files: * Copyright to name Google Inc. as the holder (for example Copyright: 2014, Google Inc.), optionally keeping "the Dart project authors" as an additional holder if desired, and add the lib/ and test/ files explicitly if a separate stanza is preferred.

Verified

• debian/copyright is machine-readable DEP-5 with the correct Format URL, a Files: * stanza, a debian/* stanza and one stand-alone Apache-2.0 License paragraph pointing at /usr/share/common-licenses/Apache-2.0 (a valid common-licenses file) - no proposed replacement needed.
• Full upstream inventory read: AUTHORS, CHANGELOG.md, LICENSE, README.md, analysis_options.yaml, pubspec.yaml, lib/fake_async.dart, test/fake_async_test.dart. Only lib/fake_async.dart and test/fake_async_test.dart carry notices (both Apache-2.0, Google Inc. 2014); the rest are covered by Files: *.
• LICENSE is the complete unmodified Apache License 2.0 text; all source files are plain text (no minified JS/CSS, no .jar/.so/.class/.pyc, no firmware, fonts, images or PDFs); no vendored third-party code and no embedded copy of a library Debian ships.
• No DFSG-hostile wording anywhere: grep for non-commercial, no-modification, field-of-use, CC-*-NC/ND, "Good, not Evil" found nothing; Apache-2.0 is DFSG-free and the only licence used.
• debian/rules override_dh_install only re-stamps installed directory mtimes to $SOURCE_DATE_EPOCH; dpkg-buildpackage(1) always sets SOURCE_DATE_EPOCH (from the latest changelog entry) if unset, so the override is safe in a normal build (verified against the man page).
• debian/control: compat 14, dh-sequence-single-binary (provided by debhelper 14.5, per apt-cache); Depends dart-clock, dart-collection match the pubspec runtime dependencies; Architecture: all, Multi-Arch: foreign; Vcs-Git/Vcs-Browser/Homepage present. Standards-Version 4.7.4 has the current first two components against Policy 4.7.4.1.
• Packaging files read in full: control, rules, changelog, copyright, docs, gbp.conf, install, source/format, watch (not judged), tests/control, tests/smoke, upstream/metadata. debian/install ships lib/ and pubspec.yaml to /usr/share/dart/packages/fake_async/, matching the dart-collection convention; changelog is a valid initial release closing #1152038; autopkgtest is present (Tests: smoke, Depends: @, dart-sdk, allow-stderr).
• uscan found the packaged version as the newest upstream release (upstream 1.3.3, packaged 1.3.3).
• Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed

• Depends: dart-clock - apt-cache found no binary package dart-clock in unstable/experimental lists nor among this package's or ftp-master's NEW uploads as of 2026-10-26; it is likely a sibling dart-team upload, and its absence from these lists is not proof it does not exist.

Proposed changes

None.