Review: hey 0.1.5-2

Package Information

Description	Sends some load to a web application HTTP load generator, ApacheBench (ab) replacement, formerly known as rakyll/boom Originally called boom and was influenced from Tarek Ziade's tool at github.com/tarekziade/boom. Using the same name was a mistake as it resulted in cases where binary name conflicts created confusion. To preserve the name for its original owner, this project was renamed to hey.
Maintainer	Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed By	Arthur Diniz <arthurbd@debian.org>
Distribution	unstable
Architecture	any all
VCS	git: https://salsa.debian.org/go-team/packages/hey.git (browse)
Popcon Installs	72
Binary NEW	Yes (new binary packages of a source already in sid)
Tracker	https://tracker.debian.org/pkg/hey
Uploaded	25 days ago

New Package Report

.changes◂

Version	0.1.5-2
Changed-By	Arthur Diniz <arthurbd@debian.org>
Architecture	source all amd64
Distribution	unstable
Date	Tue, 13 Oct 2026 22:22:26 +0100
Source	hey

Changelog◂

hey (0.1.5-2) unstable; urgency=medium
 .
   * d/control:
     - Add golang-github-rakyll-hey-dev library package
     - Bump debhelper-compat from 13 to 14
     - Move source to golang section
     - Update Uploaders email to debian.org
   * d/copyright: Update years to 2026 and email to debian.org
   * d/gitlab-ci.yml: Remove auto-generated pkg-go CI config
   * d/golang-github-rakyll-hey-dev.install: Install Go source
   * d/hey.install: Install hey binary
   * d/rules:
     - Drop dh_auto_install --no-source override
     - Point help2man at debian/tmp binary
   * d/salsa-ci.yml: Revert to default pipeline recipe

.dsc◂

Section	golang
Priority	optional
Component	main
Package-List	golang-github-rakyll-hey-dev deb golang optional arch=all hey deb golang optional arch=any

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: hey
Source: https://github.com/rakyll/hey

Files: *
Copyright: 2014-2018 Google Inc. <https://google.com>
           2019-2020 Jaana B. Dogan <jbd@google.com>
License: Apache-2.0

Files: debian/*
Copyright: 2019-2026 Arthur Diniz <arthurbd@debian.org>
License: Apache-2.0

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
 https://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 On Debian systems, the complete text of the Apache version 2.0 license
 can be found in "/usr/share/common-licenses/Apache-2.0".

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 23 days ago.

Report◂

DFSG NEW review for hey version 0.1.5-2

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: absent
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

Every upstream file is under Apache-2.0: each .go file (including requester/*) carries a Copyright 2014 [or 2018] Google Inc. header with the Apache-2.0 notice, the top-level LICENSE is the verbatim Apache-2.0 text, and the only other licence statement in the tree is the Dockerfile's org.opencontainers.image.licenses="Apache 2.0". debian/copyright is DEP-5 with the exact https Format URL, Files: * (whose * matches slashes and leading dots, so .travis.yml, .gitignore and .github/ are covered) naming Google Inc. and Jaana B. Dogan, debian/* overridden to Arthur Diniz, and a stand-alone License: Apache-2.0 paragraph that carries the notice and points at /usr/share/common-licenses/Apache-2.0, so no further licence text has to be reproduced. Nothing non-free, no file without a licence, and no vendored or built file (the shipped orig tarball has no vendor/ directory, so no Files-Excluded is needed).

Packaging

The packaging follows current Go-team practice and holds up under Policy 4.7.4.1: debhelper-compat 14 with dh --builddirectory=_build --buildsystem=golang, dh-sequence-golang plus golang-any, the two x/ module -dev packages pinned by go.mod (both in Debian and both newer than the go.mod pins), help2man only under <!nodoc>, Standards-Version 4.7.4 (Policy 4.7.4.1, first components equal), Vcs-*, Homepage, XS-Go-Import-Path and Testsuite set, and a clean two-package split (usr/bin in hey, usr/share/gocode and Multi-Arch: foreign in the arch:all golang-github-rakyll-hey-dev). debian/rules installs the binary and the sources through dh_auto_install and splits them with the two .install files, and generates the man page from debian/tmp/usr/bin/hey, which is still present when dh_installman runs (dh_install copies, it does not move) and is silently skipped for nodoc builds, matching the profile-guarded Build-Depends. The changelog is sane (0.1.5-2, unstable, dates consistent with their weekdays, no stale bug closures), and dropping Priority and Rules-Requires-Root is now the recommended form.

Issues

minor packaging 1. There is no debian/watch ◂

Files: debian/watch
Problem: Without a watch file new upstream releases are not noticed by uscan, the tracker or the maintainer's tools.
Fix: Add a debian/watch in version 5 format, or, if upstream has no usable release channel, one holding a comment that says so.

Verified ◂

Whole tree covered: every upstream file and every file under debian/ was read or grepped; the .pc/ directory was ignored entirely.
The pre-review scan's only item was its author check, which reported all source authors as listed in debian/copyright, so no file had to be accounted for individually.

Not confirmed ◂

None.

Proposed changes ◂

None.

Review Information

accepted — allocated to awm 23 days ago, started 23 days ago, completed 23 days ago.

Final Comment

Consider adding a debian/watch for this package.

Back to Dashboard | View all reviews for this package