foxyproxy-browser-extension 9.9+debian-2

Package Information

Description	Advanced proxy management for Firefox FoxyProxy is an advanced proxy management tool that completely replaces Firefox's limited proxying capabilities. It features automatically switching the internet connection across one or more proxy servers based on URL patterns.
Maintainer	Daniel Baumann <daniel@debian.org>
Changed By	Daniel Baumann <daniel@debian.org>
Sponsor	mail@daniel-baumann.ch
Distribution	sid
Architecture	all
VCS	git: https://forgejo.debian.net/mozilla/foxyproxy-browser-extension (browse)
Tracker	https://tracker.debian.org/pkg/foxyproxy-browser-extension
Uploaded	10 hours ago

Possible Source Package Rename

This upload builds exactly the binary packages that source package foxyproxy-firefox-extension currently builds in unstable, so it looks like a rename of that source package.

Binary	Currently built by
`webext-foxyproxy`	foxyproxy-firefox-extension

New Package Report

.changes◂

Version	9.9+debian-2
Changed-By	Daniel Baumann <daniel@debian.org>
Architecture	source all
Distribution	sid
Date	Wed, 11 Nov 2026 20:43:40 +0100
Source	foxyproxy-browser-extension

Changelog◂

foxyproxy-browser-extension (9.9+debian-2) sid; urgency=medium
 .
   * Renaming debian source package from foxyproxy-firefox-extension to
     foxyproxy-browser-extension to match upstream rename as of version 8
     and newer.

.dsc◂

Priority	optional
Component	main
Package-List	webext-foxyproxy deb web optional arch=all
Section	web

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: browser-extension
Upstream-Contact: https://github.com/foxyproxy/browser-extension/issues
Source: https://github.com/foxyproxy/browser-extension/tags
Files-Excluded:
 screenshots

Files: *
Copyright: 2019-2026 Eric Jung <eric.jung@getfoxyproxy.org>
License: GPL-2

Files: package-lock.json
Copyright: 2022-2026 Eric Jung <eric.jung@getfoxyproxy.org>
License: ISC

Files: debian/*
Copyright: 2021-2026 Daniel Baumann <daniel@debian.org>
License: GPL-2

License: GPL-2
 The full text of the GNU General Public License 2
 can be found in the file /usr/share/common-licenses/GPL-2

License: ISC
 Permission to use, copy, modify and/or distribute this software for any
 purpose with or without fee is hereby granted, provided that the above
 copyright notice and this permission notice appear in all copies.
 .
 THE SOFTWARE IS PROVIDED "AS-IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

DFSG Assistant LLM REVIEW 1 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 8 hours ago.

Report◂

DFSG NEW review for foxyproxy-browser-extension version 9.9+debian-2

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: No
Packaging is of good quality: Yes
Issues: 1 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

All licences in the tree are DFSG-free (GPL-2 for the project, ISC for package-lock.json, MPL-2.0 for eight Firefox icons), so nothing is non-free. debian/copyright is nevertheless inaccurate: eight SVG icons under src/image/ carry an MPL-2.0 notice but are covered only by the Files: * stanza, which attributes them to Eric Jung under GPL-2; there is no MPL stanza and no MPL-2.0 licence text or pointer.

Packaging

The packaging is simple and correct for an arch:all WebExtension: compat 14 with dh-sequence-single-binary (provided by debhelper 14.5), a manual install into /usr/share/webext/foxyproxy with the usual /usr/share/mozilla/extensions/{GUID} symlink, no unnecessary dependencies, no maintainer scripts, one small works-with patch, current Standards-Version, and coherent changelog and Vcs fields. No packaging fault worth fixing before upload was found.

Issues

blocker licensing 1. Eight MPL-2.0 SVG icons are described as GPL-2 by Eric Jung; no MPL-2.0 stanza or licence text in debian/copyright ◂

Files: debian/copyright:8-10, src/image/beaker.svg:1, src/image/container.svg:1, src/image/delete.svg:1, src/image/edit-copy.svg:1, src/image/filter.svg:1, src/image/help.svg:1, src/image/power.svg:1, src/image/privateBrowsing.svg:1
Basis: checked, in the package or with a reference tool
Evidence: Each file begins <!-- This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.; debian/copyright has only Files: * with Copyright: 2019-2026 Eric Jung <eric.jung@getfoxyproxy.org> and License: GPL-2.
Problem: DEP-5 requires each file's actual copyright and licence to be stated (copyright-format 5.3 and 6.7; Policy 12.5). These Mozilla in-content icons are MPL-2.0, not GPL-2, and the file notices name no holder, so the current stanza both mislicenses them and attributes them to the wrong party. The MPL-2.0 notice is not reproduced and no stanza refers to it.
Fix: Add a Files: stanza listing the eight paths above (an src/image/*.svg glob would wrongly catch the GPL-2 project icons) with the correct copyright holder (Mozilla) and License: MPL-2.0, plus a stand-alone License: MPL-2.0 paragraph referring to /usr/share/common-licenses/MPL-2.0. If upstream can be asked, confirm the holder for the copied Firefox icons.

minor packaging 2. Files-Excluded is set but the version carries no repack suffix ◂

Files: debian/copyright, debian/changelog, debian/watch
Basis: found by the review tooling's own checks
Evidence: 9.9+debian-2
Problem: debian/copyright has Files-Excluded, so uscan repacks the upstream tarball, but the version in debian/changelog does not say so with a suffix such as +dfsg or +ds, as is the convention for a tarball that differs from upstream's.
Fix: Add the suffix to the version, and Repacksuffix to debian/watch.

Verified ◂

Read all of debian/ (control, rules, changelog, copyright, docs, README.Debian, source/format, upstream/metadata, patches/series and the patch) and the top-level README.md, CONTRIBUTING.md, PRIVACY.md, FAQ.md, package.json, Gruntfile.js and LICENSE; sampled src/content JS/HTML/CSS/JSON and src/manifest.json and manifest-basic.json.
The pre-scan's author check reported every holder found is named in debian/copyright; I accounted for that by grepping the whole tree (gitignore false) for Copyright/(C)/©/SPDX/MPL/Apache/BSD/MIT/public-domain wording.
Upstream LICENSE is the verbatim GPL-2 text and CONTRIBUTING.md says GNU General Public License version 2.0; no or any later version wording anywhere, so the GPL-2 short name in debian/copyright is correct (not GPL-2+).
The Files: package-lock.json ISC stanza matches the file's own root metadata ("license": "ISC") and the full ISC text is included; it is DFSG-free and its Copyright field is only a formal attribution for a machine-generated lock file.
Other SVGs (src/image/icon.svg, logo.svg, icon-off.svg, loading.svg, external-link.svg, code.svg) and the PNG icons/ericjung.png carry no third-party notice and are covered by the project's GPL-2 Files: * stanza.
No non-free wording (non-commercial, no-derivatives, field-of-use), no vendored third-party JS/CSS, no minified or otherwise built files in the source; src/content/test.js is upstream UI code, not a detached test artifact. The screenshots referenced by README.md are absent, consistent with Files-Excluded.
dh-sequence-single-binary is provided by debhelper 14.5 on the reviewing system; at compat 14 the missing Depends field is correct, and RRR is not declared (the default under dpkg-build-api 0 is binary-targets, which is not a fault).
debian/rules installs src into /usr/share/webext/foxyproxy and creates the /usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/foxyproxy@eric.h.jung symlink; the gecko id in src/manifest.json matches the symlink name and strict_min_version 128 matches the versioned Enhances.
Both firefox (159.0-1) and firefox-esr (153.6.0esr-1) exist and satisfy >= 128; the top changelog entry's source name matches control's Source despite the source package rename; Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.x.
The single quilt patch changes only the toolbar placement in src/manifest.json, applies to the shipped manifest, and is still relevant; the series has no obsolete entries.
uscan found the packaged version as the newest upstream release (upstream 9.9, packaged 9.9+debian).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (GPL-2).

Not confirmed ◂

No browser was available to execute the extension, so its runtime behaviour and UI (including the patched default_area) were not exercised; only the static install layout and manifest were checked.

Proposed changes ◂

None.

Uploader's response to the LLM review

Waiting for the uploader's response until 2026-11-12 21:15 UTC, because the review found serious issues.

Back to Dashboard | View all reviews for this package