DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: glue-qt 1:0.4.1-1

Package Information

DescriptionQt-based user interface package for glueviz

Glue is a Python project to link visualizations of scientific datasets within and among files. This package provides the Qt-based graphical user interface components. and viewers for the glue ecosystem.

Some of its features are:

* Interactive, linked statistical graphics of multiple files. * Support for many file formats including common image formats, ascii tables, astronomical image and table formats (fits, vot, ipac), and HDF5. Custom data loaders can also be easily added. * Highly scriptable and extendable.

MaintainerDebian Astro Team <debian-astro-maintainers@lists.alioth.debian.org>
Changed ByOle Streicher <olebole@debian.org>
Sponsorolebole@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/debian-astro-team/glue-qt.git (browse)
Closes#1099324
Blocked Bugs#1083421 (serious)
Trackerhttps://tracker.debian.org/pkg/glue-qt
Uploaded6 hours ago

New Package Report

.changes
Distributionunstable
DateSun, 18 Jan 2026 12:00:00 +0000
Sourceglue-qt
Version1:0.4.1-1
Changed-ByOle Streicher
Architecturesource all
Changelog
glue-qt (1:0.4.1-1) unstable; urgency=medium
 .
   * Initial release. Closes: #1099324, #1127551
.dsc
Componentmain
Package-Listglueviz deb python optional arch=all
python3-glue-qt deb python optional arch=all
Sectionpython
Priorityoptional
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: glue-qt
Source: https://github.com/glue-viz/glue-qt

Files: *
Copyright: 2013-2019 Glue developers
License: BSD-3-Clause

Files: debian/*
Copyright: 2026 Ole Streicher
License: BSD-3-Clause

Files: debian/org.glueviz.GlueQt.metainfo.xml
Copyright: non-applicable
License: CC0-1.0

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 * Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
 * Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the
   distribution.
 * Neither the name of the Glue project nor the names of its
   contributors may be used to endorse or promote products derived
   from this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
 INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
 BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
 OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
 AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
 WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: CC0-1.0
 Creative Commons Zero v1.0 Universal
 .
 The full text of this license can be found in
 /usr/share/common-licenses/CC0-1.0

Review Information

rejected — allocated to awm 13 days ago, started 13 days ago, completed 13 days ago.

Final Comment

Generally looks OK, but there are problems with your signing key:

Signing key on BAFC6C85F7CB143FEEB6FB157115AFD07710DCF7 is not bound:
           No binding signature at time 2026-01-29T14:42:57Z
  because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
  because: SHA1 is not considered secure since 2023-02-01T00:00:00Z
dpkg-source: warning: cannot verify inline signature for /usr/src/dfsg/glue-qt_0.4.1-1.dsc: no acceptable signature found

A minor nit: the debian/upstream/metadata URL returns a 404

Public Notes

13 days ago ● public

Signing key on BAFC6C85F7CB143FEEB6FB157115AFD07710DCF7 is not bound:
No binding signature at time 2026-01-29T14:42:57Z
because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
because: SHA1 is not considered secure since 2023-02-01T00:00:00Z
dpkg-source: warning: cannot verify inline signature for /usr/src/dfsg/glue-qt_0.4.1-1.dsc: no acceptable signature found
dpkg-source: info: extracting glue-qt in glue-qt_0.4.1-1

13 days ago ● public

duck - check URL redirections

Command: duck
Exit code: 1

E: debian/upstream/metadata:URL: https://conference.scipy.org/proceedings/scipy2015/chris_beaumont.html: ERROR (Certainty:wild-guess)
   Curl:0 HTTP:404 No error 

13 days ago ● public

Licenserecon

Command: lrc -l
Exit code: 0

en: Versions: licenserecon '11.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

d/copyright      | licensecheck

BSD-3-Clause     | BSD-3-clause      LICENSE
No significant differences found

Back to Dashboard | View all reviews for this package