Review: golang-github-a1ex3-zstd-seekable-format-go 0.10.0-1

Package Information

Description	Seekable ZSTD compression format (library) Package seekable adds random-access reads to compressed Zstandard data. It writes compressed streams with a seek table and reads them by decompressed byte offset through Reader, ReadAt, and Seek. The resulting stream remains valid Zstandard data, so standard Zstandard readers can still decode it sequentially. The wire format is the Zstandard seekable format: compressed frames followed by a seek table in a skippable frame.
Maintainer	Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed By	Drew Parsons <dparsons@debian.org>
Sponsor	dparsons@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/go-team/packages/golang-github-a1ex3-zstd-seekable-format-go.git (browse)
Closes	#1151245
Tracker	https://tracker.debian.org/pkg/golang-github-a1ex3-zstd-seekable-format-go
Uploaded	19 days ago

New Package Report

.changes◂

Changed-By	Drew Parsons <dparsons@debian.org>
Architecture	source all
Distribution	unstable
Date	Mon, 19 Oct 2026 18:25:14 +0200
Source	golang-github-a1ex3-zstd-seekable-format-go
Version	0.10.0-1

Changelog◂

golang-github-a1ex3-zstd-seekable-format-go (0.10.0-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1151245)
   * debian/watch tracks pkg/v* release tags, not general v* tags

.dsc◂

Section	golang
Priority	optional
Component	main
Package-List	golang-github-a1ex3-zstd-seekable-format-go-dev deb golang optional arch=all

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/a1ex3/zstd-seekable-format-go
Upstream-Name: zstd-seekable-format-go
Upstream-Contact: Alex <pakshin.2018@gmail.com>

Files: *
Copyright: 2022 Alexey Ivanov
 2025 Alex (A1ex3)
License: Expat

Files: debian/*
Copyright: 2026 Drew Parsons <dparsons@debian.org>
License: Expat
Comment: Debian packaging is licensed under the same terms as upstream

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 19 days ago.

Report◂

DFSG NEW review for golang-github-a1ex3-zstd-seekable-format-go version 0.10.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: 2 found

Licensing

Single MIT/Expat licence across the whole tree, matching the repo-root LICENSE; debian/copyright is machine-readable DEP-5 with a catch-all Files: * stanza naming the only holders evidenced in the tree (doc.go and LICENSE: 2022 Alexey Ivanov) plus the current maintainer (2025 Alex (A1ex3)), and a Files: debian/* stanza. The Expat text is quoted in full. The two .zst testdata files flagged by the prescan are interop fixtures whose generating commands are inline in seekable_test.go (source data is the in-tree README), and the fuzz corpus under pkg/testdata/fuzz is ordinary Go fuzz seed data; neither is a built artifact missing its source. No non-free terms, no embedded third-party code.

Packaging

Standard pkg-go layout: debhelper-compat 14, buildsystem golang, single arch:all Multi-Arch: foreign -dev binary, Testsuite: autopkgtest-pkg-go, correct Vcs-* fields, Standards-Version 4.7.4 (current Policy 4.7.4.1). Rules use the single-binary addon, appropriate for one binary at compat 14. All Build-Depends/Depends names exist in the archive except the only concern: the btree dependency is version-constrained above what the archive lists, see unconfirmed.

Issues

None.

Verified ◂

Read in full: debian/copyright, debian/control, debian/rules, debian/changelog, debian/source/format, debian/gbp.conf, debian/upstream/metadata, debian/salsa-ci.yml, debian/gitlab-ci.yml, debian/watch; there are no patches, no debian/tests, no debian/cargo-checksum.json.
Upstream inventory complete (.pc/ ignored): root LICENSE, README.md, .gitignore, .github/* workflows, .vscode/settings.json, and pkg/** (Go sources, go.mod/go.sum, pkg/env, pkg/testdata + fuzz corpus).
Grep of pkg/ for copyright/licence headers: only pkg/doc.go carries one (Copyright (c) 2022, Alexey Ivanov); other Go files have no header but are covered by the module's repo-root LICENSE (MIT), which Files: * matches.
debian/copyright holders: all holders found by the scan (Alexey Ivanov) are named; the added 2025 Alex (A1ex3) matches the upstream maintainer and Upstream-Contact, so the copyright stanza is accurate.
Prescan archives: pkg/testdata/intercompat-t2sz.zst and pkg/testdata/intercompat-zstdseek_v0.zst are interop test fixtures; seekable_test.go:63-77 documents the exact commands that generated them from the in-tree README.md, so their source is present; they are not missing-source built artifacts.
Prescan copyright: the only holder found, Alexey Ivanov, is named in debian/copyright.
Packaging: --with=single-binary is a real debhelper addon (checks dh(1) addons list) that passes --destdir=debian/<pkg>/ to dh_auto_install and refuses with >1 binary; correct for this single arch:all golang library at compat 14.
/usr/share/common-licenses pointer not used; License: Expat short name is valid and the MIT text is embedded in full, so no reference issue.
Embedded third-party code: none; all go.mod deps (xxhash, btree, klauspost/compress, testify, x/sync) are provided by the corresponding Debian -dev packages named in Build-Depends/Depends.
uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 2.0.1, packaged 0.10.0), which is not a fault of the package.

Not confirmed ◂

golang-github-google-btree-dev (>= 1.1.3~) in Build-Depends and Depends: pkg/go.mod requires btree v1.1.3 and pkg/reader.go uses the generic btree.NewG/*btree.BTreeG API (introduced only after 1.0.1), but the reviewing archive lists only golang-github-google-btree-dev 1.0.1-1. If no btree >= 1.1.3 has been uploaded/accepted since those lists were taken, the versioned dependency is unsatisfiable and the build would fail (old API cannot compile reader.go). A btree >= 1.1.3 upload may be pending in NEW; the apt-cache tool only reports NEW for names absent from the lists, so it could not surface one. Verify the current archive state before upload.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 19 days ago.

Review Information

accepted — allocated to awm 19 days ago, started 19 days ago, completed 19 days ago.

Final Comment

Back to Dashboard | View all reviews for this package