netty-jni-util 0.0.12-1

Package Information

Description	Helper functions for the JNI code of Netty Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. netty-jni-util provides the helper functions used by Netty and its subprojects that use JNI. They are distributed as C sources to be compiled into the JNI libraries using them.
Maintainer	Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed By	Emmanuel Bourg <ebourg@apache.org>
Sponsor	ebourg@apache.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/java-team/netty-jni-util.git (browse)
Closes	#1153542
Tracker	https://tracker.debian.org/pkg/netty-jni-util
Uploaded	2 hours ago

New Package Report

.changes◂

Source	netty-jni-util
Version	0.0.12-1
Changed-By	Emmanuel Bourg <ebourg@apache.org>
Architecture	source all
Distribution	unstable
Date	Tue, 10 Nov 2026 13:40:39 +0100

Changelog◂

netty-jni-util (0.0.12-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1153542)

.dsc◂

Priority	optional
Component	main
Package-List	libnetty-jni-util-dev deb libdevel optional arch=all
Section	libdevel

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: netty-jni-util
Source: https://github.com/netty/netty-jni-util
Files-Excluded: .mvn
                mvnw*

Files: *
Copyright: 2020-2022, The Netty Project
License: Apache-2.0

Files: src/main/c/netty_jni_util.c
Copyright: 2020, The Netty Project
           2000-2024, The OpenSSL Project Authors
Comment: strlcpy, strlcat and dladdr are copied from the OpenSSL sources
 imported in the NetBSD tree (crypto/o_str.c and crypto/dso/dso_dlfcn.c)
License: Apache-2.0

Files: debian/*
Copyright: 2026, Emmanuel Bourg
License: Apache-2.0

License: Apache-2.0
 On Debian systems, the full text of the Apache-2.0 license
 can be found in the file '/usr/share/common-licenses/Apache-2.0'

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for netty-jni-util version 0.0.12-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

Every file in the tree is Apache-2.0, and the DEP-5 debian/copyright covers each of them: Files: * for The Netty Project's 2020-2022 files, a dedicated later stanza for src/main/c/netty_jni_util.c that adds the OpenSSL Project Authors copyright for the strlcpy/strlcat/dladdr code copied from the OpenSSL sources in the NetBSD tree, and debian/* for the packager. The Apache-2.0 stand-alone paragraph points at /usr/share/common-licenses/Apache-2.0, no file carries non-free wording, and there are no built artifacts or generated code whose sources are missing.

Packaging

A single arch:all, source-only -dev package built with debhelper compat 13 and a plain dh sequencer with --buildsystem=none, which is the right choice for a package that installs two files straight from the source tree. The install and docs targets, changelog, Vcs-* fields and Standards-Version 4.7.4 are all in order, and there are no patches, maintainer scripts or tests to get wrong.

Issues

minor packaging 1. Files-Excluded is set but the version carries no repack suffix ◂

Files: debian/copyright, debian/changelog, debian/watch
Basis: found by the review tooling's own checks
Evidence: 0.0.12-1
Problem: debian/copyright has Files-Excluded, so uscan repacks the upstream tarball, but the version in debian/changelog does not say so with a suffix such as +dfsg or +ds, as is the convention for a tarball that differs from upstream's.
Fix: Add the suffix to the version, and Repacksuffix to debian/watch.

Verified ◂

Tree inventory (upstream, .pc left out): .gitignore, CMakeLists.txt, LICENSE.txt, NOTICE.txt, README.md, pom.xml, .github/scripts/release_rollback.sh, .github/workflows/ci-release.yml, .github/workflows/cmake.yml, license/LICENSE.aix-netbsd.txt, license/LICENSE.mvn-wrapper.txt, src/main/c/netty_jni_util.c, src/main/c/netty_jni_util.h, src/main/java/JniUtil.java; all were read or classified.
The pre-review scan listed no file to account for: it scanned 13 files and found every copyright holder it saw already named in debian/copyright (The Netty Project, The OpenSSL Project Authors, Emmanuel Bourg).
debian/copyright is machine-readable (Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/) with Upstream-Name/Source, Files: * (2020-2022, The Netty Project, Apache-2.0), a later stanza for src/main/c/netty_jni_util.c (2020, The Netty Project plus 2000-2024, The OpenSSL Project Authors, with a Comment naming crypto/o_str.c and crypto/dso/dso_dlfcn.c), debian/* (2026, Emmanuel Bourg), and a stand-alone Apache-2.0 paragraph. No upstream file falls outside these stanzas.
Licence evidence read in the files: netty_jni_util.c lines 2-28 (Netty header plus an ASF Apache-2.0 grant header), netty_jni_util.h lines 2-13, JniUtil.java lines 2-13, CMakeLists.txt, pom.xml, .gitignore, .github/scripts/release_rollback.sh and .github/workflows/ci-release.yml (2022 headers); LICENSE.txt and license/LICENSE.aix-netbsd.txt are the Apache-2.0 text itself.
.github/workflows/cmake.yml has no per-file notice of its own; it is covered by the repository-wide Files: * clause and the root LICENSE.txt/NOTICE.txt, so it is not an unlicensed file.
The AIX strlcpy/strlcat/dladdr code in netty_jni_util.c is attributed by upstream's own NOTICE.txt and license/LICENSE.aix-netbsd.txt to netbsd under Apache-2.0, and debian/copyright records The OpenSSL Project Authors as holder; the two agree.
No restrictive or non-free wording anywhere in the tree (searched the whole package outside .pc for non-commercial, no-modification, field-of-use, all-rights-reserved and similar terms); no file is under BSD, MIT, LGPL or OpenSSL/SSLeay terms.
Files-Excluded in debian/copyright (.mvn, mvnw*) matches the shipped source: listing netty-jni-util_0.0.12.orig.tar.xz shows neither .mvn nor any mvnw* file; only license/LICENSE.mvn-wrapper.txt remains, an Apache-2.0 licence text covered by Files: *.
No built programs, libraries, bytecode, minified code, archives, PDFs, images or fonts, no generated code and no vendored third-party source trees in the tree; the only non-source files are the licence texts.
All packaging files read in full: control, rules, changelog, copyright, libnetty-jni-util-dev.install, libnetty-jni-util-dev.docs, source/format; there is no patches/ directory (.pc/applied-patches is empty), no maintainer scripts, no debian/tests and no debian/not-installed.
dh usage checked: --buildsystem=none is a valid pseudo-buildsystem (Dh_Buildsystems.pm returns undef for 'none'); with it dh_auto_* do nothing and debian/tmp is never created, so dh_missing (which defaults to --fail-missing at compat 13) exits early instead of failing on the files installed straight from the source tree.
debian/libnetty-jni-util-dev.install destinations ('usr/include', 'usr/src/netty-jni-util') are directories as dh_install(1) requires, giving /usr/include/netty_jni_util.h and /usr/src/netty-jni-util/netty_jni_util.c; NOTICE.txt is installed as documentation and debian/copyright by dh_installdocs.
control: Architecture: all with Multi-Arch: foreign fits header-and-source-only content; Depends: ${misc:Depends} is present and correct at compat 13; Standards-Version: 4.7.4 has the same first two components as the reviewing system's Policy 4.7.4.1, so it is current; Vcs-Git, Vcs-Browser and Homepage are set; the changelog (0.0.12-1, unstable) closes the ITP #1153542.
uscan found the packaged version as the newest upstream release (upstream 0.0.12, packaged 0.0.12).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed ◂

The NetBSD/OpenSSL files cited in the debian/copyright Comment could not be fetched (no network), so their own headers were not compared directly; the package's NOTICE.txt, license/LICENSE.aix-netbsd.txt and the 2000-2024 OpenSSL copyright line all state Apache-2.0.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package