DFSG NEW Queue

DFSG, Licensing & New Packages Team

golang-github-ncruces-sort 1.0.0-1

Package Information

DescriptionSorting algorithms implemented in Go (library)

Educational Go implementations of classic sorting algorithms (Quicksort, Heapsort, Shellsort), focusing on clarity and simplicity rather than peak performance. Useful as a learning resource and as a dependency of related ncruces Go packages.

MaintainerDebian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed ByHermes Rodríguez <hrodrig@usb.ve>
Sponsormaytham@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/go-team/packages/golang-github-ncruces-sort.git (browse)
Closes#1146820
Trackerhttps://tracker.debian.org/pkg/golang-github-ncruces-sort
Uploaded6 hours ago

New Package Report

.changes◂
DateFri, 13 Nov 2026 16:26:20 +0800
Sourcegolang-github-ncruces-sort
Version1.0.0-1
Changed-ByHermes Rodríguez <hrodrig@usb.ve>
Architecturesource all
Distributionunstable
Changelog◂
golang-github-ncruces-sort (1.0.0-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1146820)
   * d/copyright: embed MIT-0 license text (not shipped in common-licenses).
   * d/control: Standards-Version 4.7.4; drop Priority and Rules-Requires-Root;
     add dpkg-build-api (= 1).
   * d/watch: Version 5 (Github template).
   * d/rules: use debian/_build; d/gbp.conf: ignore-branch.
.dsc◂
Package-Listgolang-github-ncruces-sort-dev deb golang optional arch=all
Sectiongolang
Priorityoptional
Componentmain
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: sort
Upstream-Contact: Nuno Cruces <ncruces@gmail.com>
Source: https://github.com/ncruces/sort

Files: *
Copyright: 2024 Nuno Cruces
License: MIT-0

Files: debian/*
Copyright: 2026 Hermes Rodríguez <hrodrig@usb.ve>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: MIT-0
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 4 hours ago.

Report◂

DFSG NEW review for golang-github-ncruces-sort version 1.0.0-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 with the canonical Format URL and two stanzas that cover the tree correctly (later debian/* overrides Files: *). Upstream is MIT-0 (the MIT No Attribution text shipped in LICENSE, only holder 2024 Nuno Cruces, no attribution clause), which is DFSG-free; the four PNG diagrams under anims/ are covered by the same stanza and the only third-party mention in the tree is a credit to the visualization tool that rendered them. Because neither MIT-0 nor Expat is in /usr/share/common-licenses, both full licence texts are embedded. No other copyright holder or licence appears anywhere in the source.

Packaging

Minimal, correct packaging: Build-Depends of debhelper-compat (= 13), dpkg-build-api (= 1), dh-sequence-golang and golang-any; a single Architecture: all -dev package built by the golang debhelper build system into /usr/share/gocode, Multi-Arch: foreign as in the Go team's other library packages. Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1, and omitting both Priority (Policy 4.7.3) and Rules-Requires-Root (dpkg-build-api level 1) is correct. Changelog is a sane 1.0.0-1 initial release to unstable with a valid timestamp and an ITP closure; Vcs-*, Homepage, XS-Go-Import-Path, debian/upstream/metadata and salsa CI are all present, and there are no patches, maintainer scripts or debian/tests to get wrong (Testsuite: autopkgtest-pkg-go is the Go team's standard mechanism).

Issues

None.

Verified ◂
  • Read every file under debian/ (control, rules, changelog, copyright, gbp.conf, watch, salsa-ci.yml, gitlab-ci.yml, source/format, upstream/metadata); .pc/ was not read.
  • Read LICENSE in full, README.md, go.mod, .gitignore, .github/workflows/go.yml, and the package/import lines and function comments of heap/heap.go, quick/quick.go and shell/shell.go; grepped the whole tree with gitignore: false for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, GNU ... Public, Apache/Mozilla, public domain, All rights reserved, non-commercial and CC-BY wording.
  • The only copyright/licence statements in the tree are LICENSE (MIT No Attribution License, Copyright (c) 2024 Nuno Cruces) and debian/copyright; the Go sources carry no headers and are named by the Files: * stanza.
  • debian/copyright's MIT-0 paragraph reproduces the LICENSE text apart from its title line, and its Expat paragraph is the full MIT text; grep over /usr/share/common-licenses shows neither MIT-0 nor Expat there, so embedding both was required and done.
  • Files: * plus the later Files: debian/* stanza cover every path: upstream files (go.mod, README.md, .gitignore, .github/workflows/go.yml, six .go files, four PNGs) and all debian/ files; the debian/* copyright holder (2026 Hermes Rodriguez) matches debian/control and debian/changelog.
  • anims/heap.png, anims/ninthers.png, anims/quick.png and anims/shell.png are the four PNG algorithm diagrams referenced by README.md, whose Credits section names github.com/invzhi/sorting-visualization as the tool used for the visualizations; they are binary and were not opened. golang.pm shows dh_golang installs only .go/.c/.cc/.cpp/.h/.hh/.hpp/.proto/.s files, testdata and go.mod/go.sum, so none of the four reaches the -dev package.
  • .github/workflows/go.yml only references GitHub actions (actions/checkout, actions/setup-go, ncruces/go-coverage-report); it vendors no third-party code, and the file is MIT-0 under Files: *.
  • The Go code imports only the standard library (cmp, slices, math/rand, testing); nothing is vendored and no external Go module is required.
  • Policy on the reviewing system is 4.7.4.1 (/usr/share/doc/debian-policy/policy.txt.gz); Standards-Version 4.7.4 matches its first two components, so it is current.
  • Policy 4.7.3 (upgrading-checklist) says Priority need not be stated, and /usr/bin/dpkg-gencontrol fills Priority: optional with field_get_default_value; dpkg-build-api(7) level 1 defaults Rules-Requires-Root to no, so both omitted fields are correct.
  • The trailing comma in Depends: ${misc:Depends}, is harmless: Dpkg::Deps drops the empty trailing list item and dpkg-gencontrol deletes a relationship field left empty (/usr/bin/dpkg-gencontrol:355-358).
  • golang.pm's clean ends in rmdir_builddir, so --builddirectory=debian/_build leaves nothing behind for dpkg-source after debian/rules clean.
  • debian/changelog: 1.0.0-1, distribution unstable, Closes: #1146820, and the timestamp Fri, 13 Nov 2026 is a real Friday and not in the future.
  • The orig tarball (ncruces-sort-cc1c116/) contains exactly the tree reviewed, and the debian tarball contains only debian/; there are no debian/patches.
  • uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 1.0.3, packaged 1.0.0), which is not a fault of the package.
Not confirmed ◂
  • anims/*.png were not opened (binary), so only their location, README.md's credit and dh_golang's install rules were used to judge them.
  • The reference tools xd://policy, xd://man, xd://debhelper and xd://apt-cache returned only their own documentation pages for valid arguments, so Policy, debhelper and dpkg behaviour were checked in the files below /usr instead; no apt-cache lookup of golang-any or dpkg-build-api was possible (this system has no dpkg database or package lists).
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 4 hours ago.

Back to Dashboard | View all reviews for this package