golang-github-samber-oops 1.18.1-1

Package Information

Description	Error handling with context, assertion, stack trace and source fragments (Yet another) error handling library: oops.Errorf is a dead-simple drop-in replacement for built-in error, adding contextual information such as stack trace, extra attributes, error code, and bug-fixing hints... This is NOT a logging library. oops should complement your existing logging toolchain (zap, zerolog, logrus, slog, go-sentry...).
Maintainer	Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed By	Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Sponsor	maytham@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/go-team/packages/golang-github-samber-oops.git (browse)
Closes	#1152528
Tracker	https://tracker.debian.org/pkg/golang-github-samber-oops
Uploaded	4 hours ago

New Package Report

.changes◂

Version	1.18.1-1
Changed-By	Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Architecture	source all
Distribution	unstable
Date	Fri, 30 Oct 2026 10:01:18 +0100
Source	golang-github-samber-oops

Changelog◂

golang-github-samber-oops (1.18.1-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1152528)

.dsc◂

Component	main
Package-List	golang-github-samber-oops-dev deb golang optional arch=all
Section	golang
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/samber/oops
Upstream-Name: oops
Upstream-Contact: https://github.com/samber/oops/issues

Files: *
Copyright: 2023 Samuel Berthe
License: Expat

Files: stacktrace.go stacktrace_cleanpath.go
Copyright: 2016 Palantir Technologies
           2023 Samuel Berthe
License: Apache-2.0 and Expat
Comment: Taken from https://github.com/palantir/stacktrace (stacktrace.go,
 cleanpath/gopath.go) and modified, as the file headers say.

Files: debian/*
Copyright: 2026 Juan Manuel Méndez Rey <juan.mendezr@proton.me>
License: Expat
Comment: Debian packaging is licensed under the same terms as upstream

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
     http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 On Debian systems, the complete text of the Apache License, Version 2.0
 can be found in "/usr/share/common-licenses/Apache-2.0".

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for golang-github-samber-oops version 1.18.1-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

debian/copyright is a valid DEP-5 file with the correct Format URL. Its Files: * stanza (Expat, 2023 Samuel Berthe) covers the bulk of the tree and matches LICENSE; the two files copied from palantir/stacktrace have their own stanza naming Palantir Technologies and the Apache-2.0 licence, which is compatible with Expat and whose text is correctly referenced through /usr/share/common-licenses/Apache-2.0; debian/* is attributed to the uploader. I found no other third-party code, no separate LICENSE/COPYING/NOTICE file below the top level, and no non-free wording anywhere. Every file, including the README holder flagged by the prescan, is covered by a stanza.

Packaging

The packaging follows current Debian Go team practice: debhelper compat 14 with dpkg-build-api 1, dh-go and the golang buildsystem, the two separate Go modules under loggers/ and recovery/ excluded from both build and install with DH_GOLANG_EXCLUDES, autopkgtest-pkg-go, DEP-12 debian/upstream/metadata, gbp.conf and salsa-ci.yml, a sane initial changelog for unstable, and Standards-Version 4.7.4 (Policy is 4.7.4.1). The only real defect is that the versioned dependency on golang-github-oklog-ulid-dev (>= 2.1.0) cannot be satisfied by any version in the archive, which blocks a clean-chroot build and would make the -dev package uninstallable.

Issues

minor packaging 1. Build-Depends and Depends require golang-github-oklog-ulid-dev (>= 2.1.0), but the archive's only version is 2.0.2+ds-2 ◂

Files: debian/control:9, debian/control:26
Basis: inferred from what was read, not seen directly
Evidence: debian/control has Build-Depends: ... golang-github-oklog-ulid-dev (>= 2.1.0) and Depends: golang-github-oklog-ulid-dev (>= 2.1.0); apt-cache shows only Package: golang-github-oklog-ulid-dev / Version: 2.0.2+ds-2. go.mod requires github.com/oklog/ulid/v2 v2.1.1.
Problem: dpkg-checkbuilddeps in a clean unstable chroot cannot satisfy this Build-Depends, so the package does not build as uploaded; even if built, the -dev package's versioned Depends could not be satisfied. The constraint looks deliberate (upstream go.mod requires ulid v2.1.1 and the code calls ulid.Make), so dropping it is only possible if 2.0.2 turns out to be API-compatible. If a newer ulid upload is waiting in NEW, this is resolved by that upload rather than by changing this package, which is why this is reported as a dependency issue rather than a build-failure prediction.
Fix: Ensure a golang-github-oklog-ulid-dev version >= 2.1.0 is accepted before or together with this package (the ulid source package needs updating), or, if 2.0.2 already provides the API used, lower the version constraint in both Build-Depends and Depends.

Verified ◂

Prescan item: README.md:756 Copyright © 2023 [Samuel Berthe](https://github.com/samber) is the same holder as the Files: * stanza (Copyright: 2023 Samuel Berthe), so it is covered; no other holder was flagged.
Read all of debian/: changelog, control, copyright, gbp.conf, rules, salsa-ci.yml, source/format, upstream/metadata (debian/watch left to the separate check).
LICENSE is the MIT/Expat text with Copyright (c) 2023 Samuel Berthe; the Files: * stanza uses the correct DEP-5 short name Expat and includes the full licence text.
stacktrace.go:11-13 (Inspired by palantir/stacktrace ... Apache 2.0 LICENSE) and stacktrace_cleanpath.go:4-6 (Stolen from palantir/stacktrace ... Apache 2.0 LICENSE) are the only files carrying a third-party provenance note; the dedicated stanza names Palantir Technologies and Apache-2.0 and Expat, which is accurate for modified Apache-2.0 code, and the Apache-2.0 text is referenced from /usr/share/common-licenses/Apache-2.0.
Grepped the whole tree for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU General Public, GNU Lesser, Apache License, Mozilla Public, public domain and All rights reserved: only LICENSE, README.md and debian/copyright matched, plus the two palantir notes; there is no other LICENSE/COPYING/NOTICE file and no NC/ND/field-of-use wording.
DEP-5 structure checked: Files: * catch-all first, then the more specific pattern for the two stacktrace files, then debian/*; the last matching stanza therefore applies correctly. Comment: is a permitted field (copyright-format 5.2).
Packaging mechanics checked against the installed dh-go buildsystem: it prunes debian/ and .pc, installs .go/go.mod/go.sum, and with compat >= 12 excludes paths matching DH_GOLANG_EXCLUDES from install as well, so the loggers/ and recovery/ submodules (each with its own go.mod) are neither built nor shipped; their absence from the -dev package is therefore intentional, not a missing file.
Dependencies checked with apt-cache: dh-go 1.69 (provides the golang sequence and buildsystem), dpkg-build-api (= 1) is provided by dpkg-dev 1.23.11, golang-github-samber-lo-dev 1.38.1 and golang-opentelemetry-otel-dev 1.46.0 exist; golang-any currently resolves to golang-go 2:1.27~1, which satisfies go.mod's go 1.21.
debian/gbp.conf dist = DEP14 is valid: gbp's buildpackage.py accepts both DEP-14 and DEP14.
Standards-Version 4.7.4 against Policy 4.7.4.1 differs only in the fourth component, so not an issue; changelog is for unstable, initial version 1.18.1-1, closes #1152528, and its date (Fri, 30 Oct 2026) is consistent.
Compared with the orig tarball: it contains the same 37 files as the unpacked tree (no *_test.go, no assets/, no examples/), so the absent tests are upstream's release tarball, not Debian repacking, and README's reference to assets/logo.png points at a file upstream does not ship.
uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 1.23.2, packaged 1.18.1), which is not a fault of the package.
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed ◂

Build-Depends/Depends on golang-github-samber-lo-dev are unversioned although go.mod requires github.com/samber/lo v1.50.0 while the archive has 1.38.1; in dh-go's GOPATH mode module versions are ignored, so if an API used here (helpers.go calls lo.ErrorsAs, error.go uses lo.TernaryF/lo.MapToSlice) was added after 1.38.1, the build fails. A build in a clean unstable chroot would show; the maintainer's own clean build presumably settled it.
Whether a golang-github-oklog-ulid-dev >= 2.1.0 upload is waiting in NEW: the apt-cache tool only examines NEW for package names absent from the archive, and this name exists at 2.0.2+ds-2, so a newer version there could not be seen.

Proposed changes ◂

None.

Uploader's response to the LLM review

I am tackling this for next revision, and fixing it on salsa right now. Please accept this one.

— Juan Manuel Méndez Rey (mendezr), 2 hours ago

Additionally, the constraint is needed (the code calls ulid.Make), and golang-github-oklog-ulid 2.1.2-1 was accepted into unstable today, so it is satisfied now. Nothing to change. Please accept this upload.

— Juan Manuel Méndez Rey (mendezr), 2 hours ago

Back to Dashboard | View all reviews for this package