golang-github-aquasecurity-iamgo 0.0.10-1

Package Information

Description	Go package for parsing/assembling AWS IAM policy documents iamgo is a Go package for parsing/assembling AWS IAM policy documents, as the official SDK does not seem to fully support this. It handles the multiple possible types for various IAM elements and hides this complexity from the consumer.
Maintainer	Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed By	Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Sponsor	tsimonq2@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/go-team/packages/golang-github-aquasecurity-iamgo.git (browse)
Closes	#1152494
Tracker	https://tracker.debian.org/pkg/golang-github-aquasecurity-iamgo
Uploaded	3 hours ago

New Package Report

.changes◂

Version	0.0.10-1
Changed-By	Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Architecture	source all
Distribution	unstable
Date	Fri, 30 Oct 2026 09:49:46 +0100
Source	golang-github-aquasecurity-iamgo

Changelog◂

golang-github-aquasecurity-iamgo (0.0.10-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1152494)

.dsc◂

Package-List	golang-github-aquasecurity-iamgo-dev deb golang optional arch=all
Section	golang
Priority	optional
Component	main

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/aquasecurity/iamgo
Upstream-Name: iamgo
Upstream-Contact: https://github.com/aquasecurity/iamgo/issues

Files: *
Copyright: 2022 Liam Galvin
           2022 Stephen Hearn
License: Expat
Comment: LICENSE names "2022 Liam Galvin"; Stephen Hearn wrote later commits.

Files: debian/*
Copyright: 2026 Juan Manuel Méndez Rey <juan.mendezr@proton.me>
License: Expat
Comment: Debian packaging is licensed under the same terms as upstream

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for golang-github-aquasecurity-iamgo version 0.0.10-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 and accurate. Upstream is a single MIT/Expat project: LICENSE carries Copyright (c) 2022 Liam Galvin and the Expat text, and no other file in the tree carries a copyright notice, licence header or SPDX tag. The Files: * stanza names Liam Galvin (plus Stephen Hearn, noted in a Comment as the later committer) and debian/* names the packager, both under Expat, whose full text is reproduced in the file. No vendored or embedded third-party code, no built artefacts, no unclear-provenance data.

Packaging

Straightforward, conventional Debian Go library packaging: debhelper compat 14 through debhelper-compat (= 14) with the golang buildsystem and addon provided by dh-go (which is in the archive and supplies both --with=golang and the dh_golang_autopkgtest command that backs Testsuite: autopkgtest-pkg-go); single Architecture: all -dev package, Multi-Arch: foreign, XS-Go-Import-Path present, test-only dependency marked <!nocheck>, quilt source format with no patches, Standards-Version: 4.7.4 (current against Policy 4.7.4.1), sane single-entry changelog and upstream/Vcs metadata. The only thing I could not confirm is that the jfather build dependency is packaged in the archive.

Issues

None.

Verified ◂

Read debian/copyright in full: DEP-5, Format 1.0, Files: * (Expat, Liam Galvin/Stephen Hearn) and debian/* (Juan Manuel Méndez Rey, Expat), with the complete MIT/Expat text; the text matches LICENSE verbatim in substance.
LICENSE is the only file in the tree with a copyright or licence notice (Copyright (c) 2022 Liam Galvin, MIT/Expat); a grep for Copyright/(C)/SPDX/Licensed under/Permission is hereby granted/GNU/Apache/MPL/public domain/All rights reserved found nothing else. This accounts for every file the prescan compared against debian/copyright: it reported 'every holder found is named'.
Inventory: 20 upstream files, all plain Go sources, README.md, Makefile, .golangci.yml, .github/workflows/{lint,test}.yml, go.mod, go.sum, LICENSE — no vendor/ directory, no testdata, no generated code, no binaries, images, fonts or PDFs. //go:generate and build tags: none.
The Expat stanza covers the whole tree via Files: *, with debian/* overriding for packaging; no licence outside /usr/share/common-licenses needs embedding beyond the MIT text already present, and there is nothing non-free to conflict with the DFSG.
debian/rules builds with dh $@ --builddirectory=debian/_build --buildsystem=golang --with=golang; dh-go 1.69 is in unstable and provides the golang buildsystem/addon (Commands: dh_golang, dh_golang_autopkgtest), so --with=golang and Testsuite: autopkgtest-pkg-go are satisfied.
debian/control: compat 14 via debhelper-compat, dpkg-build-api (= 1), correct Build-Depends (golang-any, jfather, testify only under <!nocheck>), Architecture: all with Multi-Arch: foreign, ${misc:Depends} present (harmless at compat 14).
debian/source/format is 3.0 (quilt), debian/patches does not exist, so no patch hygiene issues; changelog is a single 0.0.10-1 unstable entry with a plausible date; debian/upstream/metadata, gbp.conf and salsa-ci.yml are well-formed.
uscan found the packaged version as the newest upstream release (upstream 0.0.10, packaged 0.0.10).

Not confirmed ◂

Build-Depends/Depends golang-github-aquasecurity-jfather-dev was not found by the apt-cache tool in unstable/experimental or in the NEW queues; the tool warns the lists may be some days old and that the name may be a source package. Every .go file imports github.com/aquasecurity/jfather, so if it is genuinely unpackaged the build cannot succeed; a build would settle it.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package