DFSG NEW Queue

DFSG, Licensing & New Packages Team

emacs-keychain-environment 2.4.1+git20251123-1

Package Information

Descriptionload keychain environment variables

Keychain is a script that manages ssh-agent and gpg-agent. It is typically run from the shell's initialization file. It allows your shells and cron jobs to share a single ssh-agent and/or gpg-agent.

When keychain is run, it checks for running agent, otherwise it starts them. It saves the agents' environment variables to files inside ~/.keychain/, so that subsequent shells can source these files.

When Emacs is started under X11 and not directly from a terminal these variables are not set. This library looks for these files created by keychain and then sets Emacs' environment variables accordingly. It does not actually run keychain, so you still have to run that from a login shell first.

To use run the function `keychain-refresh-environment' in your init file. If keychain has not been run yet when you start Emacs you can also later call that function interactively.

Keychain's manpage can be read online at https://github.com/danielrobbins/keychain/blob/master/keychain.pod.

MaintainerDebian Emacsen team <debian-emacsen@lists.debian.org>
Changed ByXiyue Deng <manphiz@debian.org>
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/emacsen-team/emacs-keychain-environment.git (browse)
Closes#1153995
Trackerhttps://tracker.debian.org/pkg/emacs-keychain-environment
Uploaded1 hour ago

New Package Report

.changes◂
Sourceemacs-keychain-environment
Version2.4.1+git20251123-1
Changed-ByXiyue Deng <manphiz@debian.org>
Architectureall source
Distributionunstable
DateSun, 15 Nov 2026 02:11:52 -0800
Changelog◂
emacs-keychain-environment (2.4.1+git20251123-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1153995)
.dsc◂
Sectioneditors
Priorityoptional
Componentmain
Package-Listelpa-keychain-environment deb editors optional arch=all
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: emacs-keychain-environment
Source: https://github.com/emacsorphanage/keychain-environment
Upstream-Contact: Jonas Bernoulli <jonas@bernoul.li>

Files: *
Copyright:
 (C) 2011-2018 Jonas Bernoulli
 (C) 2008-2011 Paul Tipper
License: GPL-3+

Files: debian/*
Copyright: (C) 2026 Xiyue Deng <manphiz@debian.org>
License: GPL-3+

License: GPL-3+
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation, either version 3 of the License, or
 (at your option) any later version.
 .
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 .
 You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.
 .
 On Debian systems, the complete text of the GNU General
 Public License version 3 can be found in `/usr/share/common-licenses/GPL-3'

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 0 hours ago.

Report◂

DFSG NEW review for emacs-keychain-environment version 2.4.1+git20251123-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 1 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The tree is a single GPL-3-or-later Emacs Lisp file plus a Makefile, README and .gitignore, all covered by a DEP-5 debian/copyright with a correct Format line. The two upstream holders named in keychain-environment.el (Jonas Bernoulli 2011-2018, Paul Tipper 2008-2011) are both named, the GPL-3+ short name matches the file's 'version 3 ... or any later version' notice, and the licence text plus a pointer to /usr/share/common-licenses/GPL-3 is present. No third-party or vendored code, no separate LICENSE/COPYING/NOTICE files, and no built, minified or binary files are in the tree; the prescan found no unnamed holder.

Packaging

Small, conventional dh-elpa package: compat 14 with dh-elpa (which Provides dh-sequence-elpa), rules is just the elpa sequence with ELPA_NAME and DEB_UPSTREAM_VERSION exported, debian/elpa installs the .el file and debian/docs ships README.md. Standards-Version 4.7.4 matches the current Policy 4.7.4.1 in its first two components, Vcs-* and Homepage are set, the changelog is a well-formed initial unstable release, and the source format is 3.0 (quilt) with no patches. The upstream Makefile has no install target, so dh_auto_install does nothing (per dh_auto_install(1) it only runs make install when the Makefile has such a target); dh_auto_build's make produces .elc/autoloads in the source tree, which are not shipped and are removed by the Makefile's clean target. No policy or user-visible problems found.

Issues

minor packaging 1. uscan finds only upstream versions older than the packaged one ◂
  • Files: debian/watch
  • Basis: found by the review tooling's own checks
  • Evidence: upstream 2.4.1, packaged 2.4.1+git20251123
  • Problem: The newest version uscan finds with debian/watch is older than the version in debian/changelog, so the watch file does not find the packaged release: it may look in the wrong place, or the versions may need mangling to compare.
  • Fix: Check where debian/watch looks and how it mangles versions.
Verified ◂
  • debian/copyright in full: DEP-5, exact 1.0 Format URL, header fields Upstream-Name/Source/Upstream-Contact, one Files: * stanza (GPL-3+), one later debian/* stanza (GPL-3+), and a stand-alone GPL-3+ paragraph with the warranty notice and the /usr/share/common-licenses/GPL-3 pointer.
  • Every upstream file in the tree accounted for: keychain-environment.el (notices at lines 3-4, GPL-3+ at lines 14-24), Makefile, README.md, .gitignore; no LICENSE/COPYING/NOTICE/AUTHORS files exist anywhere in the tree; no subdirectories below the top level.
  • Grep for Copyright/(C)/©/SPDX/Licensed under/GNU GPL family/Apache/MPL/public domain/All rights reserved found only the GPL-3+ notices and the debian/copyright text; nothing non-free and no conflicting licence.
  • Prescan result: every copyright holder found is named in debian/copyright (author check scanned 3 files, 3 authors declared, no missing holder); the prescan listed no built files, minified code, PDFs, archives or non-free wording to account for.
  • debian/control: debhelper-compat (= 14), dh-elpa (apt-cache: dh-elpa 2.2.0 Provides dh-sequence-elpa and Depends on emacs-nox | emacs), Standards-Version 4.7.4 vs Policy 4.7.4.1 (policy tool), Architecture all, correct ${elpa:Depends}, Homepage and Vcs-Git/Vcs-Browser present.
  • debian/rules uses the elpa sequence only; no patches directory, no maintainer scripts, no install/links/maintscript files; debian/elpa is '*.el' and debian/docs is README.md.
  • Upstream Makefile (all/lisp/loaddefs/clean, no install target) means dh_auto_install does nothing; generated .elc and *-autoloads.el are listed in .gitignore and only *.el is installed, so they do not reach the binary package.
  • debian/changelog: initial unstable release closing #1153995, valid distribution and a date (Sun, 15 Nov 2026) consistent with its weekday and today's date.
  • Ignored .pc/ as instructed; it is neither reviewed nor reported.
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (GPL-3).
Not confirmed ◂
  • The inside of the .orig.tar.xz and .debian.tar.xz could not be listed beyond their top-level directory entries by the archive reader; the unpacked tree was therefore taken as the source of record.
  • Whether the upstream git snapshot is really version 2.4.1 cannot be checked from the package; it is only asserted by DEB_UPSTREAM_VERSION and the version string.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package