DFSG NEW review for dart-process version 5.0.6-1

Summary

• Licensing is DFSG-compliant and debian/copyright is accurate: Yes
• Packaging is of good quality: Yes
• Issues: 0 blocker, 0 important, 1 minor
• debian/watch: version 5
• debian/copyright: machine-readable
• Scan before the review: nothing found

Licensing

The whole tree is the Dart project's process package under a 3-clause BSD licence, DFSG-free and compatible with nothing else in the package; every one of the 17 upstream files carries the same Copyright (c) 2013/2026, the Dart project authors header referring to the top-level LICENSE, which debian/copyright reproduces. The file is DEP-5 with a correct Format line, a Files: * stanza, a debian/* stanza and the licence text inline. The only inaccuracy is that the reproduced licence text says "Google Inc." in clause 3 where upstream's LICENSE says "Google LLC" (minor). No non-free terms, no unlicensed file, no vendored code, no binary or generated files.

Packaging

A clean, conventional dart-team source-only package: debhelper compat 14 with its own dh-sequence-single-binary add-on, patch-free 3.0 (quilt), no maintainer scripts, a smoke autopkgtest, and a sane dependency set (dart-path and dart-sdk are in the archive; dart-file and dart-platform are waiting in NEW). The debian/rules reproducibility override is safe because dpkg-buildpackage always sets SOURCE_DATE_EPOCH, and dh_missing cannot fail here since the package does not use debian/tmp. Standards-Version 4.7.4 is current against Policy 4.7.4.1.

Issues

1. [minor] [licensing] debian/copyright's BSD-3-clause text says "Google Inc." where upstream's LICENSE says "Google LLC"

• Files: debian/copyright:24, LICENSE:13
• Basis: checked, in the package or with a reference tool
• Evidence: debian/copyright: * Neither the name of Google Inc. nor the names of its vs. LICENSE: * Neither the name of Google LLC nor the names of its
• Problem: The stand-alone License paragraph is supposed to be the text of the licence as it applies to the files (copyright-format 1.0 sections 5.3 and 6.7); this one reproduces an older wording of the clause instead of what upstream ships, so debian/copyright does not exactly record the licence of the files it covers.
• Fix: Replace "Google Inc." with "Google LLC" in the debian/copyright licence text so it matches LICENSE, or, if the intention is to keep the historical wording, say so; upstream's own AUTHORS still writes "Google Inc.".

Verified

• Read every file of debian/ in full: control, copyright, rules, changelog, install, docs, gbp.conf, source/format, tests/control, tests/smoke, upstream/metadata (no patches, no maintainer scripts, no debian/compat).
• Upstream tree is 17 files; all read or fully grepped: AUTHORS, CHANGELOG.md, LICENSE, README.md, analysis_options.yaml, dart_test.yaml, pubspec.yaml, example/main.dart, lib/process.dart, lib/src/interface/{common,exceptions,local_process_manager,process_manager,process_wrapper}.dart, test/utils.dart, test/src/interface/{common_test,process_wrapper_test}.dart.
• Every upstream file begins // Copyright (c) 2013, the Dart project authors (example/main.dart: 2026) with governed by a BSD-style license that can be found in the LICENSE file; that is what the Files: * stanza names, and the prescan found no holder missing from debian/copyright. LICENSE's and AUTHORS' differing Google entity is a difference within upstream's own files, not one against debian/copyright.
• Only one licence file in the tree (top-level LICENSE); no LICENSE/COPYING/NOTICE in any subdirectory, so no vendored third-party code.
• Greps for non-commercial, no-modification, field-of-use and similar wording, and a glob for *.js, *.jar, *.class, *.so, *.dll, *.exe, *.pyc, *.pdf, minified CSS, found nothing: no non-free terms and no built/preferred-form-missing artifacts.
• Dependencies checked with apt-cache: dart-path 1.9.1-2 and dart-sdk 3.13.4+dfsg1-6 are in the archive; dart-file and dart-platform are not in the lists yet but are built by dart-file 7.0.1-1 and dart-platform 3.2.0-1 waiting in ftp-master's NEW queue, so they are not issues. dh-sequence-single-binary is a virtual package provided by debhelper 14.5.
• dh_missing at compat 14 cannot fail this build: its default source directory is debian/tmp ($srcdir='debian/tmp' in /usr/bin/dh_missing) and it exits 0 when that directory does not exist and no --sourcedir was passed; this package has no build system, so dh_auto_install produces nothing. So no debian/not-installed is required.
• debian/rules' find debian/dart-process -type d -exec touch -d "@${SOURCE_DATE_EPOCH}" {} + cannot receive an empty date: dpkg-buildpackage(1) sets SOURCE_DATE_EPOCH to the last changelog timestamp if it is not already defined (/usr/share/man/man1/dpkg-buildpackage.1).
• Standards-Version 4.7.4 against Debian Policy 4.7.4.1 (xd://policy) — same first two components, so current; no Priority needed in debian/control (Policy 5.6.6 "when it appears").
• debian/tests/control (Tests: smoke, Depends: @, dart-sdk, Restrictions: allow-stderr) has all its dependencies available; debian/tests/smoke registers every /usr/share/dart/packages/* directory by basename, which matches debian/install shipping the lib as /usr/share/dart/packages/process (pubspec name: process) and the pub names file/path/platform of the declared dependencies.
• Source format 3.0 (quilt) with no debian/patches: nothing to review for DEP-3 or patch hygiene; the .dsc, debian.tar.xz and orig.tar.gz list only debian/ and the package tree.
• uscan found the packaged version as the newest upstream release (upstream 5.0.6, packaged 5.0.6).

Not confirmed

• debian/tests/smoke writes .dart_tool/package_config.json by hand without a languageVersion field for the packages it registers; no Dart SDK is on the reviewing system, so I could not check whether the VM accepts a package config without it. If it does not, the autopkgtest would fail at dart run main.dart while the package itself is fine; a test run would show this.

Proposed changes

None.