monaco-editor-core 0.57.0+ds-1

Package Information

Description	core of the Monaco editor Monaco is the code editor that ships with VS Code; monaco-editor-core is its engine: the part of VS Code's src/vs tree that has been shaken down to the standalone editor, without the workbench and without the language servers. The monaco-editor package is the wrapper that adds the language workers, and is what applications normally depend on. The engine is shipped as an ES module tree, so it can be served to a browser as static files as well as pulled apart by a bundler. Node.js is an event-based server-side JavaScript engine.
Maintainer	Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed By	Emfox Zhou <emfox@debian.org>
Sponsor	emfox@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/js-team/monaco-editor-core.git (browse)
Closes	#1149722, #1150312
Tracker	https://tracker.debian.org/pkg/monaco-editor-core
Uploaded	4 hours ago

New Package Report

.changes◂

Source	monaco-editor-core
Version	0.57.0+ds-1
Changed-By	Emfox Zhou <emfox@debian.org>
Architecture	source all
Distribution	unstable
Date	Thu, 08 Oct 2026 21:20:00 +0800

Changelog◂

monaco-editor-core (0.57.0+ds-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1150312)
   * Ship the vscode-loc translations in the tree as upstream does, so no
     separate source package is needed. (Closes: #1149722)

.dsc◂

Section	javascript
Priority	optional
Component	main
Package-List	libjs-monaco-editor-core deb javascript optional arch=all node-monaco-editor-core deb javascript optional arch=all

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: monaco-editor-core
Source: https://github.com/microsoft/vscode

Files: *
Copyright: 2016 - present Microsoft Corporation
License: Expat

Files: vscode-loc/*
Copyright: 2016 - present Microsoft Corporation
Source: https://github.com/microsoft/vscode-loc
License: Expat

Files: src/vs/base/browser/dompurify/*
Copyright: 2015 Mario Heiderich
License: Apache-2.0

Files: src/vs/base/common/marked/*
Copyright: 2011-2014 Christopher Jeffrey
           2018 - present MarkedJS
License: Expat

Files: src/vs/base/common/semver/semver.js
Copyright: 2011-2020 Isaac Z. Schlueter and Contributors
License: ISC

Files: src/vs/base/test/common/envfile.test.ts
Copyright: 2016 - present Microsoft Corporation
           2015 Scott Motte
License: Expat and BSD-2-clause

Files: debian/*
Copyright: 2026 Emfox Zhou <emfox@debian.org>
License: Expat

Files: debian/build-modules/@types/* debian/build-modules/@vscode/*
Copyright: Microsoft Corporation
License: Expat

Files: debian/build-modules/@webgpu/types/*
Copyright: 2022 WebGPU Developers
License: BSD-3-clause

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: ISC
 Permission to use, copy, modify, and/or distribute this software for any
 purpose with or without fee is hereby granted, provided that the above
 copyright notice and this permission notice appear in all copies.
 .
 THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
 REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
 INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
 OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THIS SOFTWARE.

License: BSD-2-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: BSD-3-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.
 .
 3. Neither the name of the copyright holder nor the names of its
    contributors may be used to endorse or promote products derived from
    this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: Apache-2.0
 On Debian systems, the complete text of the Apache License 2.0 can be found
 in /usr/share/common-licenses/Apache-2.0.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 2 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 3 hours ago.

Report◂

DFSG NEW review for monaco-editor-core version 0.57.0+ds-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 2 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: 3 found

Licensing

The source is DFSG-free throughout: everything is MIT/Expat, ISC, Apache-2.0, MPL-2.0 (dual, taken as Apache-2.0), or BSD-2/3-clause, with no non-free terms. debian/copyright is machine-readable (DEP-5) and accurately maps the tree, with full licence text for every non-common licence. Two minor holder omissions remain: the vendored node path library (Joyent) and the xterm.js TaskQueue interface are not named in their stanzas, though both are correctly MIT/Expat.

Packaging

Packaging is of good quality. debhelper-compat 14 with a plain dh $@, clean overrides that drive the upstream build library directly, a well-documented repack story in README.source/mk-orig.sh, DEP-3 patches with clear purpose, a working autopkgtest that compiles and runs the upstream build-library unit tests, and sane binary split (node tree + browser symlink tree) with correct fonts-codicons handling. Standards-Version 4.7.4 is current. No policy violations or broken-upgrade risks were found.

Issues

1. [minor] [licensing] Files: * does not name Joyent, Inc. and other Node contributors for the vendored node path library

Files: debian/copyright:2-4, src/vs/base/common/path.ts:14, src/vs/base/test/common/path.test.ts:9
Basis: checked, in the package or with a reference tool
Evidence: path.ts line 14 and path.test.ts line 9 carry Copyright Joyent, Inc. and other Node contributors. under the MIT text; the files state VSCode's copy of nodejs path library ... Copied from: https://github.com/nodejs/node/commits/v22.15.0/lib/path.js. The Files: * stanza names only 2016 - present Microsoft Corporation.
Problem: These two files are substantially verbatim copies of node's path library (MIT), so their copyright is Joyent/Node contributors, not Microsoft. The catch-all stanza misattributes them; the holder is missing from debian/copyright.
Fix: Add a stanza for src/vs/base/common/path.ts src/vs/base/test/common/path.test.ts with Copyright: Joyent, Inc. and other Node contributors and License: Expat (the MIT text is already reproduced).

2. [minor] [licensing] Files: * does not name The xterm.js authors for the TaskQueue interface

Files: debian/copyright:2-4, src/vs/editor/browser/gpu/taskQueue.ts:11-13
Basis: checked, in the package or with a reference tool
Evidence: taskQueue.ts carries /** Copyright (c) 2022 The xterm.js authors. All rights reserved. @license MIT */ over the ITaskQueue interface, copied from xterm.js. The Files: * stanza names only 2016 - present Microsoft Corporation.
Problem: The ITaskQueue interface is xterm.js's work (MIT), so its holder should be represented; it is absent from debian/copyright.
Fix: Add a stanza for src/vs/editor/browser/gpu/taskQueue.ts (or extend Files: *) with Copyright: 2022 The xterm.js authors and License: Expat.

Verified

src/vs/base/common/semver/semver.js is a minified UMD bundle of node-semver 5.5.0 (ISC); the semver.js stanza names Isaac Z. Schlueter and ISC, the cgmanifest records the node-semver commit, and ISC source is readily available — not a DFSG problem.
src/vs/base/test/common/filters.perf.data.js is test data: an AMD define module returning a flat array of game AI command-name strings, with the Microsoft MIT header; not minified code in the DFSG sense.
src/vs/base/test/node/zip/fixtures/extract.zip is a 146-byte zip archive, a fixture for the zip extraction tests; binary test data.
src/vs/base/test/node/uri.perf.data.txt (8.5 MB, the file the scan could not read to EOF) is a plain list of file paths, a perf test data fixture; contains only path strings.
The dompurify/marked .d.ts and .license.txt files are correctly covered; the actual prebuilt bundles are excluded from the orig tarball and shipped via node-dompurify/node-marked (Apache-2.0 and MIT respectively, matching the stanzas).
debian/build-modules/ holds declaration-only copies of @types/trusted-types, @types/wicg-file-system-access, @vscode/diff, @vscode/tree-sitter-wasm (all MIT/Microsoft, matched by the @types/@vscode stanza) and @webgpu/types (BSD-3-clause, WebGPU Developers, matched by its stanza).
vscode-loc/* is MIT (Microsoft) per vscode-loc/LICENSE.md and is covered by its own stanza.
Standards-Version 4.7.4 is current (Policy on the reviewing system is 4.7.4.1); debhelper-compat 14 with plain dh $@ and only auto_build/auto_install overrides is correct.
Both patches are DEP-3 headed with clear purpose and Forwarded: not-needed; they adapt build/lib/nls.ts to Debian's node modules and to source-map 0.8's async SourceMapConsumer — build-time only.
The autopkgtest (autopkgtest-pkg-nodejs) compiles the upstream build/lib unit tests to CommonJS and runs them with node --test, exercising the very build library the package drives; exclusions in upstream-tests.list are reasoned.
uscan found the packaged version as the newest upstream release (upstream 0.57.0, packaged 0.57.0+ds).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed

debian/watch looks at github.com/microsoft/monaco-editor, but the Source field of debian/copyright names github.com/microsoft/vscode. Whether these are the same upstream was not checked.
debian/watch looks at github.com/microsoft/monaco-editor, but Repository in debian/upstream/metadata names github.com/microsoft/vscode. Whether these are the same upstream was not checked.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 2 hours ago.

Back to Dashboard | View all reviews for this package