DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: dart-leak-tracker 11.0.2-1

Package Information

Descriptionframework for memory leak tracking for Dart applications

This package ships the leak_tracker library as sources, so that other Dart packages can depend on it at build time.

MaintainerEmfox Zhou <emfox@debian.org>
Changed ByEmfox Zhou <emfox@debian.org>
Sponsoremfox@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/dart-team/dart-leak-tracker.git (browse)
Closes#1152236
Trackerhttps://tracker.debian.org/pkg/dart-leak-tracker
Uploaded11 days ago

New Package Report

.changes◂
DateTue, 27 Oct 2026 08:52:31 +0800
Sourcedart-leak-tracker
Version11.0.2-1
Changed-ByEmfox Zhou <emfox@debian.org>
Architecturesource all
Distributionunstable
Changelog◂
dart-leak-tracker (11.0.2-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1152236)
.dsc◂
Componentmain
Package-Listdart-leak-tracker deb devel optional arch=all
Sectiondevel
Priorityoptional
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: leak_tracker
Source: https://github.com/dart-lang/leak_tracker/tree/main/pkgs/leak_tracker

Files: *
Copyright: 2022, the Dart project authors
License: BSD-3-clause

Files: lib/src/leak_tracking/primitives/_retaining_path/_connection.dart
 lib/src/shared/_formatting.dart
 lib/src/shared/_util.dart
 test/test_infra/utils.dart
Copyright: 2022-2023 The Chromium Authors
License: BSD-3-clause

Files: debian/*
Copyright: 2026, Emfox Zhou <emfox@debian.org>
License: BSD-3-clause

License: BSD-3-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
 met:
 .
  * Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
  * Redistributions in binary form must reproduce the above
    copyright notice, this list of conditions and the following
    disclaimer in the documentation and/or other materials provided
    with the distribution.
  * Neither the name of Google LLC nor the names of its
    contributors may be used to endorse or promote products derived
    from this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 11 days ago.

Report◂

DFSG NEW review for dart-leak-tracker version 11.0.2-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 (Format 1.0) and complete: a Files: * stanza for the Dart project authors, a later stanza for exactly the four Chromium-authored files, and debian/*; every file carrying a notice is matched. All code is BSD-3-clause, whose full text is reproduced in the file (nothing needed from /usr/share/common-licenses), there is no other licence in the tree, no vendored third-party code, no built artefacts and no non-free wording. The scan's holder check agrees: the only holders are the Dart project authors and the Chromium Authors, both named.

Packaging

A single arch:all source-mirror package built with debhelper compat 14 and the single-binary addon (explicitly activated, as the compat-14 checklist recommends), installed by a two-line debian/install. Runtime Depends mirror pubspec.yaml and every name resolves (dart-vm-service 15.4.0-1 is in NEW with the required <16.0.0 bound). Changelog, Standards-Version 4.7.4 (Policy is 4.7.4.1), Vcs-*, Homepage, upstream/metadata and gbp.conf are all in order, and the autopkgtest uses only API the library actually exports. No policy violation or user-visible defect found.

Issues

None.

Verified ◂
  • Read debian/copyright in full: three Files stanzas (*, the four Chromium files, debian/*), one stand-alone License paragraph with the complete BSD-3-clause text.
  • Tree inventory: 55 files outside .pc/ and debian/, all text (.dart, .md, .yaml). 42 carry a copyright header: 38 say the Dart project authors (2022-2024) and 4 say The Chromium Authors — exactly lib/src/leak_tracking/primitives/_retaining_path/_connection.dart, lib/src/shared/_formatting.dart, lib/src/shared/_util.dart and test/test_infra/utils.dart, i.e. the four paths in the second stanza. The other 13 files (root and example pubspec/README/analysis_options, five lib*/DEPENDENCIES.md, lib/src/leak_tracking/primitives/README.md) carry no notice and are covered by Files: * and the root LICENSE.
  • The prescan's author check found no unnamed holder; corroborated by reading the matching header line of every one of the 42 files.
  • Licence keyword sweep over the whole tree found no GPL/LGPL/Apache/MPL/CC, no non-commercial or no-modification wording, no Good, not Evil, no public-domain claims: BSD-3-clause is the only licence.
  • No built or binary files: no .jar/.class/.so/.js/.pdf/.dart_tool and no minified code. The orig tarball matches the tree (listed lib/, lib/src/, lib/src/leak_tracking/, test/, test/test_infra/, example/ inside dart-leak-tracker_11.0.2.orig.tar.gz), so nothing was stripped and no Files-Excluded is needed.
  • The five DEPENDENCIES.md files marked Generated by https://github.com/polina-c/layerlens are markdown dependency diagrams committed upstream; their input is the source tree itself and they are documentation, not code, so this is not generated code lacking its preferred form of modification.
  • Entries in debian/install (lib, pubspec.yaml -> usr/share/dart/packages/leak_tracker/) exist, as does debian/docs' README.md; no maintscripts, links, dirs or patches are needed or missing.
  • Dependencies checked via apt-cache: dart-clock 1.1.3, dart-collection 1.19.1, dart-meta 1.19.0, dart-path 1.9.1, dart-sdk 3.13.4 are in the archive; dart-vm-service is built by dart-vm-service 15.4.0-1 awaiting acceptance in NEW, which satisfies (>= 11.10.0), (<< 16.0.0) and pubspec.yaml's >=11.10.0 <16.0.0.
  • dh-sequence-single-binary is a virtual package provided by debhelper 14.5 on this system; the debhelper compat-upgrade checklist says the addon is implicitly active at compat 14 and should be activated explicitly via that Build-Depends, so debian/control is correct (and dh therefore emits no compat-14 single-binary warning).
  • override_dh_install's touch -d "@${SOURCE_DATE_EPOCH}": dpkg-buildpackage(1) sets SOURCE_DATE_EPOCH from the latest changelog entry when it is unset, so the override cannot fail in a normal build; dh_fixmtimes normalises the mtimes again afterwards, so it is redundant but harmless.
  • Autopkgtest smoke test uses only exported symbols: forceGC({int fullGcCycles}) at lib/src/leak_tracking/helpers.dart:25 (exported by lib/leak_tracker.dart), the const LeakDiagnosticConfig constructor and copyWith with the three flags at lib/src/leak_tracking/primitives/model.dart:212-244, and LeakType at lib/src/shared/shared_model.dart:16; its package_config.json is written into the same temp directory as main.dart, and HOME is made writable.
  • debian/changelog: 11.0.2-1, unstable, urgency=medium, maintainer matches debian/control, date is today; version matches pubspec.yaml 11.0.2 and the .dsc. Standards-Version 4.7.4 against Policy 4.7.4.1 (first two components equal), so not an issue of any severity.
  • debian/upstream/metadata and debian/gbp.conf (debian/latest, upstream/latest, pristine-tar) are consistent; debian/source/format is 3.0 (quilt) with no patches, which is fine.
  • uscan found the packaged version as the newest upstream release (upstream 11.0.2, packaged 11.0.2).
Not confirmed ◂
  • File modes are not readable with the available tools, so whether debian/tests/smoke carries the executable bit (without which autopkgtest would not run it) could not be checked.
  • dart-sdk is not installed on this reviewing system, so the paths the autopkgtest assumes (/usr/share/dart/packages//pubspec.yaml, the /usr/lib/dart/bin/dart fallback) and the URI form of its generated package_config.json could not be exercised; command -v dart is tried first, so a different primary path would not break it.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 11 days ago.

Review Information

accepted — allocated to awm 11 days ago, started 11 days ago, completed 11 days ago.

Final Comment

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
11.0.2-1 4c812a2f… 2026-10-27 05:57 2026-10-27 05:57 dfsg-uploader rejected VIEW

Back to Dashboard | View all reviews for this package