DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: dart-sass 1.105.0-1

Package Information

DescriptionDart implementation of Sass (native compiler)

Sass is a stylesheet language that is compiled to CSS. It allows one to use variables, nested rules, mixins, functions and more, all with a fully CSS-compatible syntax.

Dart Sass is the reference implementation of the language and the only one still maintained upstream. This package contains it as a self-contained native executable, installed as /usr/bin/dart-sass. It needs neither the Dart SDK nor Node.js at run time.

The compiler also offers the generic command name /usr/bin/sass through the alternatives system, and this package provides the virtual package "sass"; see README.Debian for how that interacts with ruby-sass, which installs the same path directly.

MaintainerEmfox Zhou <emfox@debian.org>
Changed ByEmfox Zhou <emfox@debian.org>
Sponsoremfox@debian.org
Distributionunstable
Architectureamd64 all
VCSgit: https://salsa.debian.org/debian/dart-sass.git (browse)
Closes#998024
Blocked Bugs#1051470 (wishlist)
Trackerhttps://tracker.debian.org/pkg/dart-sass
Uploaded3 hours ago

New Package Report

.changes◂
Architecturesource amd64 all
Distributionunstable
DateSat, 26 Sep 2026 23:30:00 +0800
Sourcedart-sass
Version1.105.0-1
Changed-ByEmfox Zhou
Changelog◂
dart-sass (1.105.0-1) unstable; urgency=medium
 .
   * Initial release (Closes: #998024)
.dsc◂
Sectionweb
Priorityoptional
Componentmain
Package-Listdart-sass deb web optional arch=amd64
node-sass deb javascript optional arch=all
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: dart-sass
Source: https://github.com/sass/dart-sass

Files: *
Copyright: 2016, Google Inc.
License: Expat
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 "Software"), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 .
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
 LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Review Information

accepted — allocated to awm 2 hours ago, started 2 hours ago, completed 1 hour ago.

Final Comment

Hi,

I have accepted this, but I notice there are a raft of dart packages awaiting review, and I would recommend at least addressing #2 below for other builds.

There are attribution-accuracy problems in debian/copyright:

  1. Missing third-party attribution (PostCSS).

pkg/sass-parser/lib/src/stringifier.ts:7-10 explicitly states "Portions of this source file are adapted from the PostCSS codebase," © 2013 Andrey Sitnik (MIT). The Files: * stanza credits only "2016, Google Inc." and has no separate stanza for these PostCSS-derived portions. Still MIT (DFSG-free), but the copyright file fails to acknowledge a real third-party copyright holder.

  1. Files: debian/* stanza absent.

The packaging files' own copyright (packager) isn't attributed separately; the lone Files: * stanza technically covers them too but general practice is to include a debian/* stanza recognizing the work of the Debian packagers.

Packaging quality

Build-Depends incomplete relative to pubspec.yaml.

The pubspec declares http and typed_data as dependencies, but dart-http and dart-typed_data are missing from Build-Depends (debian/control:5-34). It currently doesn't break the build only because the compiled entry points (bin/sass.dart, lib/src/js.dart) never import package:http (used only in tool/grind/*) or typed_data. This is fragile and inconsistent; conversely dart-cli-pkg, dart-ffi, dart-fixnum are in Build-Depends though only used by dev tooling, not compiled output.

Thanks!

Public Notes

1 hour ago ● public

Missed Author Check

Command: dnq author-check -prepare
Exit code: 0

Author check: scanned 750 files.

NOT IN debian/copyright (1):

  Andrey Sitnik <andrey@sitnik.ru>
    pkg/sass-parser/lib/src/stringifier.ts:10

Result: ATTENTION REQUIRED — 1 author not in debian/copyright

Back to Dashboard | View all reviews for this package