golang-charm-huh-v2 2.0.3-1

Package Information

Description	TUI library to build terminal forms and prompts (library) huh? is a simple, powerful library for building interactive forms and prompts in the terminal.
Maintainer	Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed By	Maytham Alsudany <maytham@debian.org>
Sponsor	maytham@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/go-team/packages/golang-charm-huh-v2.git (browse)
Closes	#1153312
Tracker	https://tracker.debian.org/pkg/golang-charm-huh-v2
Uploaded	3 hours ago

New Package Report

.changes◂

Source	golang-charm-huh-v2
Version	2.0.3-1
Changed-By	Maytham Alsudany <maytham@debian.org>
Architecture	source all
Distribution	unstable
Date	Sat, 07 Nov 2026 16:37:45 +0800

Changelog◂

golang-charm-huh-v2 (2.0.3-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1153312)

.dsc◂

Component	main
Package-List	golang-charm-huh-v2-dev deb golang optional arch=all
Section	golang
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/charmbracelet/huh
Upstream-Name: huh
Upstream-Contact: https://github.com/charmbracelet/huh/issues

Files: *
Copyright: 2023–2026 Charm
License: Expat

Files: debian/*
Copyright: 2026 Maytham Alsudany <maytham@debian.org>
License: Expat
Comment: Debian packaging is licensed under the same terms as upstream

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for golang-charm-huh-v2 version 2.0.3-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

All upstream files are covered by a single MIT/Expat licence: LICENSE carries the Expat text with Copyright (c) 2023-2026 Charm, and a tree-wide search found no other copyright or licence notice anywhere (no vendored third-party licences, no non-free wording, no licence headers in the Go files). debian/copyright is DEP-5, names that holder for Files: * and the Debian packager for debian/*, and reproduces the full Expat text. The demo images and sample data under examples/ carry no separate terms and fall under Files: *.

Packaging

Packaging follows the Go team's conventions: debhelper compat 13 with dh-sequence-golang, XS-Go-Import-Path matching the module path charm.land/huh/v2, arch:all -dev package with Multi-Arch: foreign, all direct dependencies listed, and the examples excluded from both build and install via DH_GOLANG_EXCLUDES. One minor defect: golang-charm-glamour-v2-dev is declared in both Build-Depends and Depends although only an example (which is excluded from the build) imports glamour, and no such binary package is in the archive or NEW.

Issues

minor packaging 1. debian/control depends on golang-charm-glamour-v2-dev although the library never imports glamour ◂

Files: debian/control:15, debian/control:33
Basis: checked, in the package or with a reference tool
Evidence: Both Build-Depends and Depends list golang-charm-glamour-v2-dev,; the only glamour import in the tree is "charm.land/glamour/v2" in examples/dynamic/dynamic-markdown/main.go:6. debian/rules sets export DH_GOLANG_EXCLUDES := examples, and dh-golang's install step skips files matching that pattern at compat 13 (/usr/share/perl5/Debian/Debhelper/Buildsystem/golang.pm), so no example is built, tested, or installed. The root go.mod does not require glamour, and neither do the non-example Go files. apt-cache show golang-charm-glamour-v2-dev reports no such binary package in the archive and none in the NEW queues.
Problem: An unused build and runtime dependency: it makes the -dev package depend on a module it does not need, and because no package of that name exists in the archive the binary would be uninstallable and the build unsatisfiable (Debian Policy 7.1/7.5: Depends must name packages that exist and are actually needed). Since the examples are not built, the entry has no purpose.
Fix: Delete the golang-charm-glamour-v2-dev, line from both the Build-Depends and the Depends fields; add it back only if the examples are ever made buildable and shipped.

Verified ◂

LICENSE is the MIT/Expat text with Copyright (c) 2023-2026 Charm; debian/copyright's Files: * stanza names the same holder and its stand-alone Expat paragraph reproduces the licence verbatim.
A tree-wide grep for Copyright, (C), (c), SPDX-License-Identifier, Licensed under, Permission is hereby granted, GPL/LGPL/Apache/MPL wording, public domain and All rights reserved (with gitignore disabled) matched only LICENSE and debian/copyright.
No LICENSE/COPYING/NOTICE/AUTHORS file exists outside the top-level LICENSE; the Go sources carry no headers and all fall under Files: *.
The debian/* stanza names Maytham Alsudany under Expat, and all files under debian/ (control, rules, changelog, copyright, gbp.conf, salsa-ci.yml, watch, source/format, upstream/metadata) are packaging files.
The examples' GIF, PNG and JPEG files are demo recordings, each accompanied by the .tape script that produces it (e.g. examples/theme/theme.tape, examples/burger/demo.tape); they are upstream demo media covered by Files: *.
examples/filepicker/artichoke.hs is an empty sample data file for the filepicker example.
Every other package named in Build-Depends/Depends exists (apt-cache): golang-charm-bubbles-v2-dev 2.1.0, golang-charm-bubbletea-v2-dev 2.0.6, golang-charm-lipgloss-v2-dev 2.0.3, golang-github-catppuccin-go-dev 0.3.0, golang-github-charmbracelet-x-dev 0.0~git20260429, golang-github-mitchellh-hashstructure-dev 2.0.2, golang-any.
The test files' imports (github.com/charmbracelet/x/ansi, github.com/charmbracelet/x/xpty) are provided by golang-github-charmbracelet-x-dev, so the autopkgtest-pkg-go test needs nothing further.
debian/rules excludes examples via DH_GOLANG_EXCLUDES; read in dh-golang's golang.pm, the exclusion applies to both go list targets (build/test) and the source copy (install) at compat 13, so examples/ is neither built nor shipped.
debian/rules builds in debian/build, which dh_auto_clean removes via the golang buildsystem, so a source rebuild will not carry the directory.
Standards-Version 4.7.4 has the same major.minor as the installed Policy 4.7.4.1, so it is current.
changelog version 2.0.3-1 matches the upstream version and directory name, targets unstable, and is an initial release closing bug #1153312.
Not read: .pc/ (excluded by the review instructions) and the image files, which were recorded by name only.
uscan found the packaged version as the newest upstream release (upstream 2.0.3, packaged 2.0.3).

Not confirmed ◂

apt-cache finds no golang-charm-glamour-v2-dev in the archive or NEW queues as of its lists, which can lag; the dependency is unnecessary in any case.
Whether Debian's catppuccin-go 0.3.0 and bubbles/v2 2.1.0 provide the API this 2.0.3 source uses (GOPATH-mode builds ignore version requirements); only a build would show.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package