Review: mplapack 3.0.1+ds-1

Package Information

Description	multiple-precision BLAS and LAPACK using MPFR - runtime MPLAPACK provides multiple-precision BLAS and LAPACK routines. This package contains the MPFR reference and optimized shared libraries.
Maintainer	Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org>
Changed By	Maho Nakata <maho.nakata@gmail.com>
Sponsor	rafael@debian.org
Distribution	unstable
Architecture	any all
VCS	git: https://salsa.debian.org/science-team/mplapack.git (browse)
Closes	#1151369
Tracker	https://tracker.debian.org/pkg/mplapack
Uploaded	1 day ago

New Package Report

.changes◂

Date	Fri, 06 Nov 2026 07:37:57 +0100
Source	mplapack
Version	3.0.1+ds-1
Changed-By	Maho Nakata <maho.nakata@gmail.com>
Architecture	source amd64 all
Distribution	unstable

Changelog◂

mplapack (3.0.1+ds-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151369)

.dsc◂

Component	main
Package-List	libmplapack-mpfr-dev deb libdevel optional arch=any libmplapack-mpfr-examples deb libdevel optional arch=all libmplapack-mpfr3 deb libs optional arch=any
Section	libdevel
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: MPLAPACK
Source: https://github.com/nakatamaho/mplapack/releases/tag/v3.0.1
Files-Excluded:
external/*/download/*
external/*/patches/*
external/distfiles.sha256

Files: *
Copyright: 2008-2026 Maho Nakata
License: BSD-2-Clause

Files: mpblas/* mplapack/*
Copyright: 2008-2026 Maho Nakata
1992-2011 The University of Tennessee and The University of Tennessee Research Foundation
2000-2011 The University of California Berkeley
2006-2011 The University of Colorado Denver
NAG Ltd.
License: BSD-2-Clause and BSD-3-Clause
The MPLAPACK files in these directories are also derived from BLAS and LAPACK
routines. The BLAS/LAPACK license terms are reproduced in the upstream
COPYING file and apply in addition to the MPLAPACK license above.
.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
.
- Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
- Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
- Neither the name of the copyright holders nor the names of their
contributors may be used to endorse or promote products derived from this
software without specific prior written permission.
.
THE COPYRIGHT HOLDERS PROVIDE NO REASSURANCES THAT THE SOURCE CODE PROVIDED
DOES NOT INFRINGE ANY PATENT, COPYRIGHT, OR ANY OTHER INTELLECTUAL PROPERTY
RIGHTS OF THIRD PARTIES. THE COPYRIGHT HOLDERS DISCLAIM ANY LIABILITY TO ANY
RECIPIENT FOR CLAIMS BROUGHT AGAINST RECIPIENT FOR INFRINGEMENT OF THAT
PARTY'S INTELLECTUAL PROPERTY RIGHTS.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.

Files: configure
Copyright: 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, Inc.
License: FSFUL
This configure script is free software; the Free Software Foundation gives
unlimited permission to copy, distribute and modify it.

Files: m4/libtool.m4 m4/ltoptions.m4 m4/ltsugar.m4 m4/ltversion.m4
m4/lt~obsolete.m4
Copyright: 1996-2001, 2003-2019, 2021-2022 Free Software Foundation, Inc.
License: FSFULLR
This file is free software; the Free Software Foundation gives
unlimited permission to copy and/or distribute it, with or without
modifications, as long as this notice is preserved.

Files: Makefile.in */Makefile.in
Copyright: 1992-2021 Free Software Foundation, Inc.
License: FSF-unlimited
This file is free software; the Free Software Foundation gives unlimited
permission to copy, distribute and modify it.
.
The Makefile.in files grant unlimited permission to copy and/or distribute
them, with or without modifications, as long as the notice is preserved.

Files: aclocal.m4
Copyright: 1992-2021 Free Software Foundation, Inc.
2004 Scott James Remnant <scott@netsplit.com>
2012-2015 Dan Nicholson <dbn.lists@gmail.com>
License: FSF-unlimited and GPL-2+ with Autoconf exception
This file is free software; the Free Software Foundation
gives unlimited permission to copy and/or distribute it,
with or without modifications, as long as this notice is preserved.
.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY, to the extent permitted by law; without
even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
.
[license for embedded pkg.m4]
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
.
You should have received a copy of the GNU General Public License
along with this program; if not, see <http://www.gnu.org/licenses/>.
.
As a special exception to the GNU General Public License, if you
distribute this file as part of a program that contains a
configuration script generated by Autoconf, you may include it under
the same distribution terms that you use for the rest of that
program.

Files: compile depcomp missing test-driver
Copyright: 1999-2021 Free Software Foundation, Inc.
License: GPL-2+ with Autoconf exception
These files are free software; you can redistribute them and/or modify them
under the terms of the GNU General Public License as published by the Free
Software Foundation, either version 2 of the License, or (at your option)
any later version.
.
The complete text of GPL version 2 is available in
/usr/share/common-licenses/GPL-2 on Debian systems.
.
As a special exception to the GNU General Public License, if you distribute
these files as part of a program that contains a configuration script
generated by Autoconf, you may include them under the same distribution
terms that you use for the rest of that program.

Files: config.guess config.sub
Copyright: 1992-2022 Free Software Foundation, Inc.
License: GPL-3+ with Autoconf exception
These files are free software; you can redistribute them and/or modify them
under the terms of the GNU General Public License as published by the Free
Software Foundation, either version 3 of the License, or (at your option)
any later version.
.
The complete text of GPL version 3 is available in
/usr/share/common-licenses/GPL-3 on Debian systems.
.
As a special exception to the GNU General Public License, if you distribute
these files as part of a program that contains a configuration script
generated by Autoconf, you may include them under the same distribution
terms that you use for the rest of that program. This exception is an
additional permission under section 7 of the GNU General Public License,
version 3.

Files: ltmain.sh
Copyright: 1996-2019, 2021-2022 Free Software Foundation, Inc.
License: GPL-2+ with Libtool exception
This file is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free
Software Foundation, either version 2 of the License, or (at your option)
any later version.
.
The complete text of GPL version 2 is available in
/usr/share/common-licenses/GPL-2 on Debian systems.
.
As a special exception to the GNU General Public License, if you distribute
this file as part of a program or library that is built using GNU Libtool,
you may include this file under the same distribution terms that you use for
the rest of that program.

Files: install-sh
Copyright: 1994 X Consortium
License: X11
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to
deal in the Software without restriction, including without limitation the
rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
sell copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
.
The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Files: INSTALL
Copyright: 1994-1996, 1999-2002, 2004-2017, 2020-2021 Free Software Foundation, Inc.
License: FSFAP
Copying and distribution of this file, with or without modification, are
permitted in any medium without royalty provided the copyright notice and
this notice are preserved. This file is offered as-is, without any warranty.

Files: debian/*
Copyright: 2026 Maho NAKATA
License: BSD-2-Clause

License: BSD-2-Clause
MPLAPACK is distributed under the following two-clause BSD-style license.
.
Copyright (c) 2008-2025 Nakata, Maho
All rights reserved.
.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
.
1. Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
.
THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS" AND ANY
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 1 blocker, 1 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 day ago.

Report◂

DFSG NEW review for mplapack version 3.0.1+ds-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: No
Packaging is of good quality: Yes
Issues: 1 blocker, 1 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

Every licence in the tree is DFSG-free — BSD-2-Clause (MPLAPACK) and BSD-3-Clause (LAPACK) in the code, FSF permissive texts for the autotools files, X11 for install-sh, MIT or GPL-2+ for ltmain.sh — and nothing non-commercial, no-modification or field-of-use appears anywhere; the generated autotools files all ship with the sources they are generated from. debian/copyright is DEP-5 and otherwise well built, but it does not name two holders that the files themselves state: RIKEN for the 30 CUDA files under mpblas/optimized/dd/cuda (covered by the mpblas/* stanza, which overrides Files: *), and Bootstrap Authors for ltmain.sh.

Packaging

Competent packaging: compat 14 with a plain dh $@ --buildsystem=autoconf (so the absent ${misc:Depends}/${shlibs:Depends} substvars are correct), a sensible three-package split with Multi-Arch: same only on the runtime library, hardening, the two upstream RUNPATH flags removed and the unresolvable Requires: mpc mpfr gmp in the installed pkg-config modules replaced by explicit link flags — both documented in README.source — static libraries, .la files and the upstream /usr/misc scripts deliberately dropped via not-installed, an autopkgtest that compiles and runs against both installed pkg-config interfaces, and Standards-Version 4.7.4 against Policy 4.7.4.1. Only the MPFR backend is built, and the installed headers are the MPFR set only, so the -dev Depends match what the headers need.

Issues

blocker licensing 1. Files: mpblas/* mplapack/* does not name RIKEN, the copyright holder of the 30 CUDA files in mpblas/optimized/dd/cuda ◂

Files: debian/copyright:13-19, mpblas/optimized/dd/cuda/Rgemm.cu:1-4, mpblas/optimized/dd/cuda/Rsyrk.cu:1-4, mpblas/optimized/dd/cuda/Rgemm_fermi.cu:1-4, mpblas/optimized/dd/cuda/dd_real_cuda.h:1-4
Basis: checked, in the package or with a reference tool
Evidence: Rgemm.cu: * Copyright (c) 2010-2011 / * RIKEN / * \tAll rights reserved. (followed by the BSD two-clause text). debian/copyright:13-18 Files: mpblas/* mplapack/* / Copyright: 2008-2026 Maho Nakata / 1992-2011 The University of Tennessee ... / The University of California Berkeley / University of Colorado Denver / NAG Ltd. — no RIKEN.
Problem: A later Files stanza overrides an earlier one (copyright-format 6.9), so the mpblas/* stanza is the only statement about these files and it omits their holder; the Files: * catch-all cannot be relied on for them. The result is an inaccurate, incomplete debian/copyright for 30 files (all Rgemm*/Rsyrk* CUDA kernels and dd_real_cuda.h), which must be right before the package can be accepted.
Fix: Add 2010-2011 RIKEN to the Copyright field of the Files: mpblas/* mplapack/* stanza, or (cleaner, since these files carry only the two-clause text) add a stanza Files: mpblas/optimized/dd/cuda/* with Copyright: 2010-2011 RIKEN and License: BSD-2-Clause.

important licensing 2. Files: ltmain.sh does not name Bootstrap Authors and states only the GPL-2+ option of a file whose bootstrap parts are dual MIT/GPL-2+ ◂

Files: debian/copyright:145-147, ltmain.sh:75, ltmain.sh:1527
Basis: checked, in the package or with a reference tool
Evidence: ltmain.sh:75 and :1527 # Copyright (C) 2004-2019, 2021 Bootstrap Authors and # This file is dual licensed under the terms of the MIT license <https://opensource.org/license/MIT>, and GPL version 2 or later <http://www.gnu.org/licenses/gpl-2.0.html>. debian/copyright:145-147 names only 1996-2019, 2021-2022 Free Software Foundation, Inc. under GPL-2+ with Libtool exception.
Problem: The copyright holder stated in the file is missing from debian/copyright, so the file does not describe the copyright of ltmain.sh correctly. The licence statement is usable (GPL-2+ is one of the two offered terms, and the Libtool exception only relaxes it), but the MIT alternative is not mentioned at all.
Fix: Add 2004-2019, 2021 Bootstrap Authors to the stanza's Copyright field and say that the bootstrap-sourced parts are MIT or GPL-2+, with the rest under GPL-2+ with the Libtool exception; the MIT text must then be reproduced in a stand-alone License paragraph.

Verified ◂

debian/copyright read in full: DEP-5, Format: 1.0, Upstream-Name/Source, Files-Excluded, ten Files paragraphs and one stand-alone License paragraph (BSD-2-Clause). Every other licence text (FSFUL for configure, FSFULLR for m4/libtool*.m4, FSF-unlimited for Makefile.in, FSFAP for INSTALL, X11 for install-sh, GPL-2+/GPL-3+ with Autoconf exception for compile/depcomp/missing/test-driver/config.guess/config.sub) is given inline in its own paragraph and matches the text in the corresponding files.
Tree is 3067 text files: no binaries, images, fonts, sounds, PDFs or archives (glob for png/jpg/jpeg/gif/pdf/gz/bz2/xz/zip/tar/o/so/a/ttf/woff/ico matched nothing), so no unclear-provenance binary content to judge.
mpblas/optimized/dd/cuda/Rgemm.cu and the other 27 kernels plus dd_real_cuda.h: BSD two-clause text, holder RIKEN, contributed by Takao/Nakata and derived from netlib dgemm.f — the licence is free; only the holder is missing from debian/copyright (reported as an issue).
ltmain.sh: libtool script; body under GPL-2+ with the Libtool exception, bootstrap-sourced sections dual MIT/GPL-2+ by Bootstrap Authors — licence free; holder missing (reported as an issue).
Files-Excluded matches the tree: external/ now holds only Makefile.am/Makefile.in, and no external//download/ or external//patches/ directory and no external/distfiles.sha256 exists, so the repack removed exactly what the field names. With --with-system-gmp/mpfr/mpc=yes and -qd/-dd, configure.ac leaves GMP_DIR/MPFR_DIR/MPC_DIR empty, so no excluded download is needed by the build.
Generated files all have their preferred form or generator in the package: configure (configure.ac, autoconf), every Makefile.in (Makefile.am, automake; the files over 4 MiB are these, e.g. mplapack/reference/Makefile.in 10.7 MB, mplapack/test/eig/Makefile.in 4.1 MB, so the scan's 4 MiB truncation only cut automake boilerplate), aclocal.m4 (m4/), ltmain.sh (libtool), include/mplapack_config.h (include/mplapack_config.h.in), mplapack/reference/iMlaver.cpp (iMlaver.cpp.in), and the installed mplapack_mpfr*.pc (cmake/mplapack.pc.cmake.in).
Notices sampled across mpblas/, mplapack/, mpblas/test/, mplapack/test/, include/, benchmark/, examples/, misc/, release/, cmake/, packaging/ and m4/: BSD-2-Clause with Nakata Maho, or the LAPACK BSD-3 holders (University of Tennessee/UTRF, UC Berkeley, University of Colorado Denver, NAG Ltd.) which the mpblas/* mplapack/* stanza names; the LAPACK 3.9.1 test inputs under mplapack/test/eig are covered by that stanza too.
external/cmake/bootstrap.sh, release/.sh, misc/.sh, packaging/PKGBUILD.in and mplapack.spec.in carry no third-party notices and describe MPLAPACK itself ('BSD-2-Clause style license with original license by LAPACK'); they are covered by Files: *.
Packaging: debian/rules runs dh at compat 14 with hardening=+all; the RUNPATH flags the packaging strips are present where it says (-Wl,-rpath,$(libdir) in mplapack/reference/Makefile.in and mpblas/optimized/mpfr/Makefile.in); the pkg-config rewrite is justified because the generated MPFR module gets Requires: mpc mpfr gmp and libmpc ships no mpc.pc; the mplapack_mpfr*.pc files are build products, not source.
debian/not-installed covers exactly what dh_missing would otherwise report: the static .a, the .la files, and the scripts upstream installs into $(prefix)/misc (upstream miscdir = $(prefix)/misc); none of them reaches a binary package.
Binary split checked against the build: only the MPFR backend is configured, only include/{blas,lapack,blaswrapper,mplapack_gmpfrxx_mkII_config,mpblas_mpfr,mplapack_arithmetic_params_mpfr,mplapack_mpfr,mplapack_mpfr_precision,mplapack_utils_mpfr}.h are installed, and none of the installed headers includes fem.hpp/fable, so the -dev package and its Depends (libgmpfrxx-mkii-dev, libgmp-dev, libmpfr-dev, libmpc-dev) are self-consistent; both SONAMEs are .so.3 (LT current=3, age=0), matching libmplapack-mpfr3.
libgmpfrxx-mkii-dev 1.5.0+ds-1 exists in the archive (apt-cache show), so the (>= 1.5.0) build and test dependency is satisfiable; the Debian Science alioth maintainer address is the one the archive's own science packages use.
Standards-Version 4.7.4 against Policy 4.7.4.1 (first two components equal, so not an issue); 3.0 (quilt) source format without patches; changelog 3.0.1+ds-1 to unstable closing #1151369 on an initial release; debian/tests/control uses @ plus the headers' pkg-config dependencies, which per the autopkgtest spec expands to all three binaries and gives the test libmplapack-mpfr-dev.
uscan found the packaged version as the newest upstream release (upstream 3.0.1, packaged 3.0.1+ds).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (GPL-2, GPL-3).

Not confirmed ◂

fable/ (fem/ and tbxx/, 30 headers) carries no copyright or licence notice at all and no provenance note anywhere in the package; debian/copyright's Files: * therefore attributes them to Nakata Maho under BSD-2-Clause. The namespaces (fem, tbxx), macro names (TBXX_ASSERT, FEM_*) and file set are those of the 'fem'/'tbxx' Fortran-emulation utilities from cctbx, whose licence would then have to be named here. Worth confirming with upstream; if the code is cctbx-derived, debian/copyright needs that holder and licence text.
The scan's note that 7 files exceed 4 MiB could not be matched file by file; the ones identified (mplapack/reference/Makefile.in, mplapack/test/eig/Makefile.in and the other multi-megabyte Makefile.in files) are automake output, but the remaining large files were not individually identified.
Bug #1151369 (ITP) cannot be looked up without network access; the changelog closure is taken as given.
No build or test was run, so the packaging's build-time fixups (sed on the configured Makefiles, pkg-config rewrite, make check) are checked as source changes only.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader rejected this upload in response to the review.

Review Information

rejected — allocated to dfsg-uploader 20 hours ago, started 20 hours ago, completed 20 hours ago.

Final Comment

The uploader rejected this upload in response to the automated (LLM) review of it, so that they can fix the problems it found and upload again.

The uploader said:

I will fix the two issues detected by the DFSG Assistant and will reupload the package.

Other Reviews of this Package

Version	Hash	Allocated	Completed	Reviewer	Status	Details
3.0.1+ds-1	5f0d2e25…	2026-11-06 05:51	2026-11-06 05:51	dfsg-uploader	rejected	VIEW
3.0.1+ds-1	a8ca7f1a…	2026-11-07 19:32	2026-11-07 19:35	mechtilde	accepted	VIEW

Back to Dashboard | View all reviews for this package