Review: jaraco.packaging 10.4.0-1

Package Information

Description	Sphinx extension to interpolate project metadata This package provides an extension for the Sphinx documentation system. The extension interrogates the project's package metadata, and interpolates these values into the Sphinx configuration: * project * author * copyright * version * release * package_url
Maintainer	Ben Finney <bignose@debian.org>
Changed By	Ben Finney <bignose@debian.org>
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/bignose/pkg-jaraco.packaging/.git (browse)
Closes	#1151194
Blocked Bugs	#783396 (normal)
Tracker	https://tracker.debian.org/pkg/jaraco.packaging
Uploaded	18 days ago

New Package Report

.changes◂

Version	10.4.0-1
Changed-By	Ben Finney <bignose@debian.org>
Architecture	source all
Distribution	unstable
Date	Tue, 20 Oct 2026 08:25:23 +1100
Source	jaraco.packaging

Changelog◂

jaraco.packaging (10.4.0-1) unstable; urgency=medium
 .
   * Initial Debian release.
     Closes: bug#1151194.

.dsc◂

Priority	optional
Component	main
Package-List	python3-sphinxcontrib-jaraco.packaging deb python optional arch=all
Section	python

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: jaraco.packaging
Upstream-Contact: Jason R. Coombs <jaraco@jaraco.com>
Source: https://github.com/jaraco/jaraco.packaging/

Files: *
Copyright:
    © 2013–2026 Jason R. Coombs <jaraco@jaraco.com>
License: Expat

Files: debian/*
Copyright:
    © 2010–2026 Ben Finney <bignose@debian.org>
License: GPL-3+
License-Grant:
    This is free software: you may copy, modify, and/or distribute this work
    under the terms of the GNU General Public License as published by the
    Free Software Foundation; version 3 of that license or any later version.
    No warranty expressed or implied.


License: Expat
    Permission is hereby granted, free of charge, to any person obtaining a
    copy of this software and associated documentation files (the "Software"),
    to deal in the Software without restriction, including without limitation
    the rights to use, copy, modify, merge, publish, distribute, sublicense,
    and/or sell copies of the Software, and to permit persons to whom the
    Software is furnished to do so, subject to the following conditions:
    .
    The above copyright notice and this permission notice shall be included in
    all copies or substantial portions of the Software.
    .
    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
    FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
    DEALINGS IN THE SOFTWARE.

License: GPL-3+
    On Debian systems, the complete text of the GNU General Public License
    version 3 can be found in the file ‘/usr/share/common-licenses/GPL-3’.


# Local variables:
# coding: utf-8
# mode: debian-copyright
# fill-column: 78
# End:
# vim: fileencoding=utf-8 textwidth=78 :

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 18 days ago.

Proposes a replacement debian/watch: debian/watch in version 5 format

Report◂

DFSG NEW review for jaraco.packaging version 10.4.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: old format (version 4)
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The whole upstream tree (jaraco/packaging modules, docs, NEWS, PKG-INFO, egg-info, .github) is MIT/Expat, matching the shipped upstream LICENSE file. debian/copyright is machine-readable (Format: 1.0), with a Files: * stanza covering all upstream files (© Jason R. Coombs, Expat), an Expat license paragraph, and a GPL-3+ paragraph for debian/* (Ben Finney). The prescan's author check found every holder declared. No non-free terms, vendored code, or binary/preferred-form problems: all files are hand-written text (Python/RST/TOML/YAML). LICENSE's Copyright (c) 2026 <copyright holders> line is the unfilled jaraco skeleton template text, but the license itself is MIT/Expat as declared, and debian/copyright correctly names Jason R. Coombs as the holder, so this is not an inaccuracy.

Packaging

Solid initial release. control/rules use pybuild with debhelper-compat 14 via dh, Build-Depends vs Build-Depends-Indep correctly split for an Arch:all python3-only package, hardening implicit via dpkg-buildflags. Standards-Version 4.7.4 matches current Policy 4.7.4.1 (first two components 4.7). No quilt patches. VCS-* fields, gbp.conf and salsa-ci are in order. Runtime deps come from ${python3:Depends} ({misc,Enhances} substvars auto-applied at compat 14). Tests are deliberately disabled (override_dh_auto_test -> /bin/true) and the autopkgtest is a /bin/true superficial dummy, both documented as needed because upstream's suite fails unless the package is already installed.

Issues

minor packaging 1. debian/watch is in the old version 4 format ◂

Files: debian/watch
Basis: found by the review tooling's own checks
Evidence: version = 4
Problem: Version 5 is the current format of debian/watch.
Fix: Convert it to version 5; a mechanical conversion is under Proposed changes.

Verified ◂

Every copyright holder found by the prescan author check is declared in debian/copyright (Files: * -> Jason R. Coombs, Expat); LICENSE is MIT/Expat matching the Expat stanza.
All files reviewed are hand-written text (Python, RST, TOML, YAML, config); no minified JS/CSS, JAR/class/pyc, firmware, or binaries, and no embedded third-party code (imports only: sphinx, docutils, domdf_python_tools, jaraco.context, build — all existing Debian packages).
debian/copyright is DEP-5 machine-readable with correct Format: URL; Expat and GPL-3+ license texts included; all Files: stanzas (Files: , debian/) are present.
debian/control: debhelper-compat (= 14), pybuild-plugin-pyproject, python3-setuptools/python3-setuptools-scm/dh-python in Build-Depends; python3-* (incl. python3-sphinx <!nodoc>) in Build-Depends-Indep — correct split for the Arch:all binary. Substvars ${misc:Depends}/${python3:Depends} auto-applied by dh_gencontrol at compat 14.
Standards-Version 4.7.4 vs current Policy 4.7.4.1 — first two components match, no issue.
The jaraco PEP 420 namespace is shared with other jaraco Debian packages; this package installs only jaraco/packaging/*.py via the .pyinstall file; no conflicts.
Tests are intentionally disabled: rules sets PYBUILD_TEST_ARGS = /bin/true with override_dh_auto_test -> /bin/true and debian/tests/control uses a /bin/true test with Restrictions: superficial, both commented as required because the upstream suite fails unless the package is already installed. Deliberate, documented, not a fault.
README.source's 'Do not propose any output from Generative AI' is a contribution policy for maintainers, not a restriction in the software license — no DFSG impact; LICENSE itself is MIT/Expat.
uscan found the packaged version as the newest upstream release (upstream 10.4.0, packaged 10.4.0).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (GPL-3).

Not confirmed ◂

[INFERENCE] Build-Depends-Indep names python3-coherent.licensed (needed for the pyproject build-system requires coherent.licensed) — assumed to exist in the archive; not blocking per NEW-queue guidance.
None — remaining uncertainty is only whether the full package builds cleanly, which the archive build daemons will establish.

Proposed: debian/watch in version 5 format ◂

debian/watch is in an old format. This is the conversion made by uscan --update-watchfile, which has not been run against the upstream site: some defaults differ in version 5, so test it with uscan --report before use.

Version: 5

# debian/watch
# Debian UScan configuration for this package.
# Manual page: ‘uscan(1)’.
# Version of the UScan configuration format for this file.
# Public releases at Debian redirector for Python Package Index.
Source: https://pypi.debian.net/@PACKAGE@/
Matching-Pattern: @PACKAGE@-@ANY_VERSION@@ARCHIVE_EXT@
Pgpmode: none
Update-Script: uupdate
Uversionmangle: s/(\d)-?((?:rc|a|b|c)\d*)$/$1~$2/

Uploader's response to the LLM review

I'm deliberately remaining with UScan config format version 4 until tools improve better for version 5 support.

— Ben Finney (bignose), 18 days ago

Review Information

accepted — allocated to awm 18 days ago, started 18 days ago, completed 18 days ago.

Final Comment

Other Reviews of this Package

Version	Hash	Allocated	Completed	Reviewer	Status	Details
10.4.0-1	28db8f30…	2026-10-19 21:23	2026-10-19 21:23	dfsg-uploader	rejected	VIEW

Back to Dashboard | View all reviews for this package