libmojo-sql-perl 0.02-1

Package Information

Description	module to safely generate and compose SQL statements Mojo::SQL safely generates and composes SQL statements. To prevent SQL injection attacks, every ? in the input becomes a placeholder in the generated query, with the corresponding value bound to it. Partial statements can be composed recursively to build more complex queries.
Maintainer	Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed By	gregor herrmann <gregoa@debian.org>
Sponsor	gregoa@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/perl-team/modules/packages/libmojo-sql-perl.git (browse)
Closes	#1152242
Tracker	https://tracker.debian.org/pkg/libmojo-sql-perl
Uploaded	2 hours ago

New Package Report

.changes◂

Source	libmojo-sql-perl
Version	0.02-1
Changed-By	gregor herrmann <gregoa@debian.org>
Architecture	source all
Distribution	unstable
Date	Tue, 27 Oct 2026 04:28:56 +0100

Changelog◂

libmojo-sql-perl (0.02-1) unstable; urgency=medium
 .
   * Initial release (closes: #1152242).

.dsc◂

Section	perl
Priority	optional
Component	main
Package-List	libmojo-sql-perl deb perl optional arch=all

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://metacpan.org/release/Mojo-SQL
Upstream-Contact: Sebastian Riedel <sri@cpan.org>
Upstream-Name: Mojo-SQL

Files: *
Copyright: 2026, Sebastian Riedel <sri@cpan.org>
License: Expat

Files: debian/*
Copyright: 2026, gregor herrmann <gregoa@debian.org>
License: Artistic or GPL-1+

License: Artistic
 This program is free software; you can redistribute it and/or modify
 it under the terms of the Artistic License, which comes with Perl.
 .
 On Debian systems, the complete text of the Artistic License can be
 found in `/usr/share/common-licenses/Artistic'.

License: GPL-1+
 This program is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation; either version 1, or (at your option)
 any later version.
 .
 On Debian systems, the complete text of version 1 of the GNU General
 Public License can be found in `/usr/share/common-licenses/GPL-1'.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 0 hours ago.

Report◂

DFSG NEW review for libmojo-sql-perl version 0.02-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The package is entirely MIT/Expat-licensed: LICENSE carries the holder's MIT text and lib/Mojo/SQL.pm's POD repeats the same terms; greps for other licence wording found nothing, and there are no binaries, minified files or vendored third-party code. debian/copyright is DEP-5, with Files: * for Sebastian Riedel and Files: debian/* for the packaging, and its Expat text reproduces the licence notice as required. The pre-review author check found no holder missing from debian/copyright.

Packaging

Small, standard Debian Perl Group packaging: debhelper compat 13 with a minimal dh $@, correct Architecture: all split, Build-Depends-Indep guarded with <!nocheck>, and runtime Depends on libmojolicious-perl (>= 9.41) matching Makefile.PL's PREREQ_PM. Source format 3.0 (quilt) with no patches, initial changelog entry for 0.02-1 in unstable closing the ITP, Vcs-* and upstream metadata present, and Standards-Version 4.7.4 is current against Policy 4.7.4.1.

Issues

None.

Verified

Read all 14 upstream files (MANIFEST, META.json, META.yml, Changes, README.md, .perltidyrc, LICENSE, Makefile.PL, lib/Mojo/SQL.pm, lib/Mojo/SQL/Statement.pm, four tests) and every file under debian/ except the watch file, which is out of scope.
The pre-scan author check reported every holder found by name as present in debian/copyright; the two holders involved are Sebastian Riedel (upstream, LICENSE:3, lib/Mojo/SQL.pm:117) and gregor herrmann (packaging), and both appear in debian/copyright.
Single licence, MIT/Expat: LICENSE and the POD in lib/Mojo/SQL.pm:115-119; the Expat text in debian/copyright matches the permission and warranty paragraphs of that licence, and no other Copyright, SPDX-License-Identifier, GPL, Apache, MPL, public domain or non-free wording appears anywhere in the tree.
META.json and META.yml are ExtUtils::MakeMaker-generated module metadata (text, not artifacts); their generator input, Makefile.PL, is in the package, so they are not built files lacking source.
.perltidyrc is a developer perltidy configuration file with no copyrightable notice of its own, matched by the Files: * stanza (a DEP-5 * also matches a leading dot).
The tests (t/sql.t, t/util.t, t/pod.t, t/pod_coverage.t) are upstream test data; the POD tests skip without TEST_POD, so they need no extra build dependencies.
The orig tarball contains exactly the 14 files in the unpacked tree (no removal, so no Files-Excluded is needed), and the debian tarball holds only the files present in debian/; 3.0 (quilt) with no patches is consistent.
debian/control: compat 13, Testsuite: autopkgtest-pkg-perl, and at compat 13 dh skips dh_auto_test when DEB_BUILD_OPTIONS has nocheck, so the < !nocheck > restriction on libmojolicious-perl is correct (checked with the debhelper tool).
libmojolicious-perl 9.49+dfsg-1 in the archive satisfies the (>= 9.41) in both Build-Depends-Indep and Depends, and 9.41 is exactly what Makefile.PL declares in PREREQ_PM; libmojo-sql-perl is the binary of this upload, so its absence from the archive is expected.
libmojolicious-perl is not needed to build this pure-Perl module (dh_auto_build), only for its tests, so Build-Depends vs Build-Depends-Indep is right; ${perl:Depends} and ${misc:Depends} provide the rest.
Standards-Version: 4.7.4 matches the reviewing system's Policy 4.7.4.1 (first two components equal); omitting Priority is allowed since Policy 4.7.3 (A10.3).
Changelog libmojo-sql-perl (0.02-1) unstable is a plausible initial release matching upstream 0.02, with an ITP closure; debian/gbp.conf names the team's debian/latest and upstream/latest branches; debian/upstream/metadata is well-formed.
No maintainer scripts, no install/links/docs files and no patches are needed for this package; nothing is installed beyond MakeMaker's normal module and man-page placement, all as architecture: any Perl module.
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Artistic, GPL-1).

Not confirmed

autopkgtest is not installed on the reviewing system, so the Testsuite: autopkgtest-pkg-perl harness itself was not inspected; this is the standard Debian Perl Group declaration and no debian/tests/control is expected for it.
debian/watch could not be tested automatically: uscan ended with exit status 2 and no result that could be read, which is not normal and may mean the watch file made it misbehave. Run uscan --report on it by hand, with caution.

Proposed changes

None.

Back to Dashboard | View all reviews for this package