golang-github-knqyf263-nested 0.0.1-4

Package Information

Description	Golang library for easier way to handle the nested data structure nested is a golang library that this provides functionality to easily handle nested data structures. This library provides functions for set, get and delete data, and converting and getting data into integer and etc.
Maintainer	Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed By	Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Sponsor	tsimonq2@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/go-team/packages/golang-github-knqyf263-nested.git (browse)
Closes	#1152500
Popcon Installs	2
Tracker	https://tracker.debian.org/pkg/golang-github-knqyf263-nested
Uploaded	2 hours ago

New Package Report

.changes◂

Architecture	source all
Distribution	unstable
Date	Fri, 30 Oct 2026 08:21:47 +0100
Source	golang-github-knqyf263-nested
Version	0.0.1-4
Changed-By	Juan Manuel Méndez Rey <juan.mendezr@proton.me>

Changelog◂

golang-github-knqyf263-nested (0.0.1-4) unstable; urgency=medium
 .
   * Reintroduce: trivy needs it (Closes: #1152500).
   * Build with dh-go; add a go.mod (upstream has none).
   * Standards-Version 4.7.4, debhelper-compat 14, debian/watch version
     5.

.dsc◂

Section	golang
Priority	optional
Component	main
Package-List	golang-github-knqyf263-nested-dev deb golang optional arch=all

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: nested
Source: https://github.com/knqyf263/nested

Files: *
Copyright: 2019 Teppei Fukuda
License: Expat

Files: debian/*
Copyright: 2019 Nobuhiro Iwamatsu <iwamatsu@debian.org>
           2026 Juan Manuel Méndez Rey <juan.mendezr@proton.me>
License: Expat
Comment: Debian packaging is licensed under the same terms as upstream

License: Expat
 The MIT License
 .
 Permission is hereby granted, free of charge, to any person
 obtaining a copy of this software and associated
 documentation files (the "Software"), to deal in the Software
 without restriction, including without limitation the rights to
 use, copy, modify, merge, publish, distribute, sublicense,
 and/or sell copies of the Software, and to permit persons to
 whom the Software is furnished to do so, subject to the
 following conditions:
 .
 The above copyright notice and this permission notice shall
 be included in all copies or substantial portions of the
 Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT
 WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
 INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR
 PURPOSE AND NONINFRINGEMENT. IN NO EVENT
 SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
 LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR
 OTHER DEALINGS IN THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for golang-github-knqyf263-nested version 0.0.1-4

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The whole upstream tree (7 files: nested.go, nested_test.go, example_test.go, README.md, LICENSE, .travis.yml, .gitignore) is MIT/Expat, copyright 2019 Teppei Fukuda, and LICENSE carries the only copyright notice in the tree. debian/copyright is DEP-5, has a Files: * catch-all and a later Files: debian/* stanza, and reproduces the complete Expat text (not in /usr/share/common-licenses). No non-free terms, no vendored third-party code, no built or minified files, no missing sources.

Packaging

Small, conventional Go library package: debhelper-compat 14, dh-go with --with=golang, 3.0 (quilt) with a single well-described DEP-3 patch adding the go.mod upstream lacks, golang-any and XS-Go-Import-Path set, arch:all -dev package with correct Multi-Arch, Vcs-* and upstream metadata present, changelog properly versioned and distributed to unstable. No missing dependencies and no maintainer scripts to get wrong. Only oddity is --builddirectory=debian/_build in rules, which is a style choice, not a fault.

Issues

None.

Verified ◂

Read all seven upstream files in the orig tarball and unpacked tree; tree holds no binaries, archives, PDFs, minified code or generated sources, and the orig tarball contains exactly those seven files (no repack).
LICENSE is the MIT/Expat text Copyright (c) 2019 Teppei Fukuda; README.md states ## License MIT and ## Author Teppei Fukuda; no Copyright/(C)/SPDX-License-Identifier header appears in nested.go, nested_test.go or example_test.go.
debian/copyright Files: * covers every upstream file and Files: debian/* (later, so overriding) covers all of debian/; the stand-alone License: Expat paragraph reproduces the whole permission and warranty text, matching LICENSE including the re-wrapping of lines.
Prescan author check found every holder named; the only holder in the tree is Teppei Fukuda, which Files: * names.
go.mod is not upstream: the orig tarball has no go.mod, and it is created by debian/patches/0001-add-go-mod.patch (a 3-line module/go 1.21 declaration); it is covered by the Files: * stanza.
No third-party or vendored code, and no data, font, image or sound files, in the package.
Read all of debian/: control, rules, changelog, copyright, gbp.conf, gitlab-ci.yml, salsa-ci.yml, source/format (3.0 (quilt)), upstream/metadata, patches/series and the patch; no install/links/docs/dirs, maintscripts, .maintscript or tests directory exist.
Build-Depends verified against the archive: dh-go exists (1.69, Debian Go Packaging Team) and provides the golang sequence addon used by --with=golang; dpkg-build-api (= 1) is a virtual package provided by dpkg-dev 1.23.11; golang-any and debhelper-compat (= 14) are the usual Go library build deps.
The trailing comma in Depends: ${misc:Depends}, (debian/control:25) is harmless at compat 14: dh_gencontrol supplies the relationship substvars itself, and dpkg-gencontrol parses the field, sees an empty dependency list and deletes the empty field (/usr/bin/dpkg-gencontrol:357), so the binary simply has no Depends field, which the compat-14 rule allows.
Patch 0001-add-go-mod.patch has DEP-3 headers (Description, Author, Forwarded: not-needed, Last-Update) and a clear rationale; it is the only patch and is in series.
Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1 (first two components 4.7), so it is current; changelog distribution is unstable, the version 0.0.1-4 correctly follows the previous 0.0.1-3, and the entry closes a bug and explains the reintroduction.
uscan found the packaged version as the newest upstream release (upstream 0.0.1, packaged 0.0.1).

Not confirmed ◂

Whether Testsuite: autopkgtest-pkg-go with no debian/tests/control still yields tests: autopkgtest and debci are not installed on the reviewing system, so I could not check whether an implicit pkg-go control file exists; the Go team uses this header routinely.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package