janet 1.43.0-1
Package Information
| Description | Lisp-like programming language for system scripting expressive automation, and extending programs written in C or C++ with user scripting capabilities. |
|---|---|
| Maintainer | Jacob Mealey <jacobmealey.maine@gmail.com> |
| Changed By | Jacob Mealey <jacobmealey.maine@gmail.com> |
| Sponsor | tsimonq2@debian.org |
| Distribution | unstable |
| Architecture | any |
| VCS | git: https://salsa.debian.org/jacobmealey/janet.git (browse) |
| Popcon Installs | 6 |
| Binary NEW | Yes (new binary packages of a source already in sid) |
| Tracker | https://tracker.debian.org/pkg/janet |
| Uploaded | 3 hours ago |
New Package Report
.changes
| Architecture | source amd64 |
|---|---|
| Distribution | unstable |
| Date | Tue, 10 Nov 2026 20:20:18 -0500 |
| Source | janet |
| Version | 1.43.0-1 |
| Changed-By | Jacob Mealey <jacobmealey.maine@gmail.com> |
Changelog
janet (1.43.0-1) unstable; urgency=medium . * Update to Janet 1.43.0
.dsc
| Component | main |
|---|---|
| Package-List | janet deb interpreters optional arch=any libjanet-dev deb libdevel optional arch=any libjanet1.43 deb libs optional arch=any |
| Section | interpreters |
| Priority | optional |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: Janet Upstream-Contact: Calvin Rose <calsrose@gmail.com> Source: https://github.com/janet-lang/janet Disclaimer: Autogenerated by licensecheck Files: * Copyright: 2020 Calvin Rose and contributors License: Expat Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: . The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. Files: debian/* Copyright: 2026 Jacob Mealey <jacobmealey.maine@gmail.com> License: GPL-2+ This package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. . This package is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this package. If not, see <https://www.gnu.org/licenses/>. Comment: On Debian systems, the complete text of the GNU General Public License version 2 can be found in "/usr/share/common-licenses/GPL-2".
DFSG Assistant LLM REVIEW 1 blocker, 1 important, 2 minor
This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.
Reviewed 2 hours ago.
Report
DFSG NEW review for janet version 1.43.0-1
Summary
- Licensing is DFSG-compliant and
debian/copyrightis accurate: No - Packaging is of good quality: Yes
- Issues: 1 blocker, 1 important, 2 minor
- debian/watch: version 5
- debian/copyright: machine-readable
- Scan before the review: 2 found
Licensing
The terms themselves are DFSG-free: upstream is Expat (MIT) and the Debian packaging GPL-2+, and no non-free, non-commercial or no-modification wording appears anywhere in the tree. But debian/copyright does not accurately describe every file. src/core/pp.c is code adapted from Lua's lstrlib.c and names only Calvin Rose, so the Lua.org, PUC-Rio copyright is missing, and the Expat text the file reproduces stops before the warranty-disclaimer paragraph.
Packaging
Competent, conventional packaging: dh at compat 14 with hardening=+all, three packages with a correct SONAME-to-package-name split (libjanet.so.1.43 in libjanet1.43, the .so symlink, .a, headers and .pc in libjanet-dev), DEP-3 patch headers, current Standards-Version 4.7.4, good Vcs-* and upstream/metadata, and the upstream test suite does run at build time because dh_auto_test finds the Makefile's test target. Only small things: dh_installexamples -A copies the whole examples tree into all three packages, and the janet extended description continues the synopsis mid-sentence (Policy 3.4.2). There is no autopkgtest, though adding one would be trivial.
Issues
blocker licensing 1. Files: * does not name the Lua.org, PUC-Rio copyright on the Lua code copied into src/core/pp.c ◂
- Files:
src/core/pp.c:916,src/core/pp.c:992-1230,debian/copyright:7-22 - Basis: checked, in the package or with a reference tool
- Evidence: src/core/pp.c:916 says
* code adapted from lua/lstrlib.c http://lua.org; the file header (src/core/pp.c:2) names onlyCopyright (c) 2026 Calvin Rose, and so does theFiles: *stanza. The adapted part is Lua's string.format implementation:scanformat(),janet_formatbv()and its error strings ("invalid format (repeated flags)","no precision and string is too long to be formatted") are verbatim from lstrlib.c. Lua's licence isCopyright: 1994-2020 Lua.org, PUC-Rio./License: Expat(/usr/share/doc/lua5.4/copyright). - Problem: The Expat/MIT licence obliges anyone distributing the derived code to keep its copyright notice, so src/core/pp.c is jointly held by Calvin Rose and Lua.org, PUC-Rio. debian/copyright names only Calvin Rose, so it does not describe the copyright of every file, contrary to Policy 12.5 and copyright-format 1.0.
- Fix: Add a stanza before the catch-all, e.g.
Files: src/core/pp.cwithCopyright: 1994-2020 Lua.org, PUC-RioandCopyright: 2026 Calvin Rose and contributors,License: Expat(the full Expat text from the stand-alone stanza). Upstream would be worth telling, since Janet's own header omits the attribution.
important licensing 2. The Expat licence text in debian/copyright stops before the warranty-disclaimer paragraph ◂
- Files:
debian/copyright:10-22 - Basis: checked, in the package or with a reference tool
- Evidence: The
License: Expatparagraph ends atThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.The following paragraph of LICENSE (lines 19-26),THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND ..., is absent. - Problem: Policy 12.5 requires a verbatim copy of the distribution licence in /usr/share/doc/*/copyright, and copyright-format 6.7 says the License field must include all text needed to satisfy that requirement and any licence requirement to carry warranty disclaimers. Expat is not in /usr/share/common-licenses, so the full text has to be here, and it is truncated.
- Fix: Append the missing paragraph verbatim to the Expat stanza:
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
minor packaging 3. dh_installexamples -A copies the examples tree into libjanet-dev and libjanet1.43 as well as janet ◂
- Files:
debian/rules:14 - Basis: checked, in the package or with a reference tool
- Evidence:
dh_installexamples -A examples/*; dh_installexamples(1):-A, --all Install any files specified by command line parameters in ALL packages acted on. - Problem: The whole examples/ tree (about 70 files, including the ffi/jitfn/sample-bundle directories) ends up in /usr/share/doc/libjanet-dev/examples and /usr/share/doc/libjanet1.43/examples as well as in the janet package's doc directory, which is duplicated data in two library packages that do not need it.
- Fix: Drop
-A(the files then go to the first package acted on, janet) or usedh_installexamples -p janet examples/*.
minor packaging 4. The janet extended description continues the synopsis mid-sentence ◂
- Files:
debian/control:19-21 - Basis: checked, in the package or with a reference tool
- Evidence:
Description: Lisp-like programming language for system scripting/expressive automation, and extending programs written in C/or C++ with user scripting capabilities. - Problem: Policy 3.4.2 says not to continue the single-line synopsis into the extended description; the result is a description that begins with a lower-case fragment and makes no sense when only the synopsis is shown. (libjanet1.43's
Janet is lisp-like programming languagehas the same origin and a missing article.) - Fix: Make the extended description a self-contained sentence, e.g.
Janet is a Lisp-like programming language for system scripting, expressive automation, and extending programs written in C or C++ with user scripting capabilities.
Verified ◂
- Whole tree walked directory by directory (excluding .pc/, which was left out of every search): every upstream C, Janet, Markdown, YAML and build file either carries the Expat notice or is covered by the top-level LICENSE - the jitfn, ffi, numarray, sample-bundle and fuzzers sources included.
- examples/jitfn/hello.bin is not an unexplained blob: examples/jitfn/jitfn.janet says
nasm hello.nasm -o hello.bin, and examples/jitfn/hello.nasm is present, so the preferred form for modification ships with it. - tools/msi/LICENSE.rtf is the Expat text in RTF for the Windows installer, with the holder
Calvin Rose and contributors- the same holder as debian/copyright, so the scan's near-match is not a missing holder. - Binary images recorded but not opened: assets/icon.ico, assets/janet-big.png, assets/janet-w200.png, assets/icon_svg.svg (upstream logo, referenced from README.md) and tools/msi/JanetDialog.png, tools/msi/JanetTopBanner.png (installer artwork). No separate licence notice exists for them in the tree; they are covered by the
Files: *Expat stanza, and assets/icon_svg.svg carries no licence/creator metadata. - src/core/util.c:141-152 is a
Public domain siphash implementation(halfsiphash.c from veorq/SipHash); a public-domain dedication imposes no notice requirement and is DFSG-free, so the Expat stanza on the file is not misleading. - misc/completion/janet.bash, janet.zsh and janet.fish have no per-file notice; they are upstream's own scripts, covered by
Files: *. - The 2020 year in the
Files: *Copyright field against the 2026 of LICENSE and every file header is the same holder and only year drift, so it is not reported; the Expat and GPL-2+ notices are otherwise correct for their stanzas, andFiles: debian/*correctly overrides the catch-all. - All three patches carry Author, Date, Subject and Forwarded headers, and their dep3 subjects and diffs match what they do (strip removal, Debian CFLAGS, removal of examples/numarray/.gitignore).
- The upstream test suite does run during the build: makefile.pm's
sub testcalls make_first_existing_target(['test', 'check']) and the Makefile has atesttarget that runs test/suite*.janet and flychecks the examples. - debian/rules installs through the Makefile with PREFIX=/usr and LIBDIR=/usr/lib/$(DEB_HOST_MULTIARCH), and the resulting paths are covered exactly by the three .install files - the .so symlink goes to libjanet-dev, the versioned .so.1.43 and .so.1.43.0 to libjanet1.43, and the man page reached by both dh_installman and janet.install lands in the same package (the first in debian/control), so nothing is missing or installed twice into two packages.
- Standards-Version 4.7.4 is current against Policy 4.7.4.1, the changelog version 1.43.0-1 matches janet_1.43.0.orig.tar.gz, and the distribution is unstable with the ITP closure kept from the initial release.
- uscan found the packaged version as the newest upstream release (upstream
1.43.0, packaged1.43.0). - Every pointer of
debian/copyrightto /usr/share/common-licenses names a file that is there (GPL-2).
Not confirmed ◂
None.
Proposed changes ◂
None.
Uploader's response to the LLM review
Waiting for the uploader's response until , because the review found serious issues.