DFSG NEW Queue

DFSG, Licensing & New Packages Team

node-bidi-js 1.0.2-1

Package Information

DescriptionJavaScript implementation of the Unicode Bidirectional Algorithm

This library resolves the display order of mixed left-to-right and right-to-left text using version 13.0.0 of the Unicode Bidirectional Algorithm. It calculates character embedding levels and reordering segments, identifies mirrored characters and paired brackets, and exposes Unicode bidirectional character types.

MaintainerHome Assistant Team <team+homeassistant@tracker.debian.org>
Changed ByEdward Betts <edward@4angle.com>
Sponsoredward@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/homeassistant-team/js/node-bidi-js.git (browse)
Closes#1153519
Trackerhttps://tracker.debian.org/pkg/node-bidi-js
Uploaded10 hours ago

New Package Report

.changes◂
Changed-ByEdward Betts <edward@4angle.com>
Architectureall source
Distributionunstable
DateThu, 29 Oct 2026 11:13:30 +0000
Sourcenode-bidi-js
Version1.0.2-1
Changelog◂
node-bidi-js (1.0.2-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1153519)
.dsc◂
Package-Listnode-bidi-js deb javascript optional arch=all
Sectionjavascript
Priorityoptional
Componentmain
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: bidi-js
Upstream-Contact: Jason Johnston <jason.johnston@protectwise.com>
Source: https://github.com/lojjic/bidi-js

Files: *
Copyright: 2021 Jason Johnston
License: Expat

Files: test/BidiTest.txt test/BidiCharacterTest.txt
Copyright: 2019 Unicode, Inc.
License: Unicode-DFS-2016

Files: src/data/*
Copyright: 2021 Jason Johnston
           1991-2020 Unicode, Inc.
License: Expat and Unicode-DFS-2016
Comment: Generated from Unicode character data by scripts/generateBidiData.js.

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: Expat


License: Expat
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 "Software"), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 .
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
 LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

License: Unicode-DFS-2016
 COPYRIGHT AND PERMISSION NOTICE (ICU 58 and later)
 .
 Copyright © 1991-2020 Unicode, Inc. All rights reserved.
 Distributed under the Terms of Use in https://www.unicode.org/copyright.html.
 .
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of the Unicode data files and any associated documentation
 (the "Data Files") or Unicode software and any associated documentation
 (the "Software") to deal in the Data Files or Software
 without restriction, including without limitation the rights to use,
 copy, modify, merge, publish, distribute, and/or sell copies of
 the Data Files or Software, and to permit persons to whom the Data Files
 or Software are furnished to do so, provided that either
 (a) this copyright and permission notice appear with all copies
 of the Data Files or Software, or
 (b) this copyright and permission notice appear in associated
 Documentation.
 .
 THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF
 ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
 WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT OF THIRD PARTY RIGHTS.
 IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS
 NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL
 DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
 DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
 TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THE DATA FILES OR SOFTWARE.
 .
 Except as contained in this notice, the name of a copyright holder
 shall not be used in advertising or otherwise to promote the sale,
 use or other dealings in these Data Files or Software without prior
 written authorization of the copyright holder.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 7 hours ago.

Report◂

DFSG NEW review for node-bidi-js version 1.0.2-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 with the correct Format URL and four stanzas covering the whole tree: Files: * (Expat, 2021 Jason Johnston), the two UCD conformance suites (Unicode-DFS-2016, 2019 Unicode, Inc.), the generated src/data/* (Expat and Unicode-DFS-2016) and debian/*. Full Expat and Unicode-DFS-2016 texts are included, both licences are DFSG-free and mutually compatible, and the only other licence statement in the tree (LICENSE.txt, "license": "MIT") agrees with Expat. No other holder, no embedded third-party code and no non-free wording was found.

Packaging

Textbook js-team packaging: 3.0 (quilt), debhelper compat 14 with a plain dh $@ and the dh-nodejs, nodejs-no-lerna and single-binary sequences, Standards-Version 4.7.4 against Policy 4.7.4.1, Architecture all in section javascript, Vcs-*/Homepage/Testsuite set, a coherent initial changelog, and a pkg-js autopkgtest script that is also the build-time test. dist/ is generated by the shipped rollup config from src/ and cleaned by debian/clean; the one Debian patch carries the whole delta.

Issues

None.

Verified ◂
  • Tree inventory outside debian/ and .pc/: 24 files, each matched by a debian/copyright stanza (Files: * Expat; test/BidiTest.txt test/BidiCharacterTest.txt Unicode-DFS-2016; src/data/* Expat and Unicode-DFS-2016; debian/* Expat).
  • Prescan holder: test/BidiTest.txt:3 # © 2019 Unicode®, Inc. plus the trademark sentence on line 4 is the holder the Files: test/BidiTest.txt test/BidiCharacterTest.txt stanza already names; the same header is at test/BidiCharacterTest.txt:3. No other copyright holder exists in the tree (grep for Copyright, (C), ©, SPDX, Licensed under, Permission is hereby, All rights reserved over src/, scripts/, test/*.js, README.md, rollup.config.js, .github/).
  • The two files the scan could only read to 4 MiB are the UCD conformance suites test/BidiTest.txt (7.6 MB) and test/BidiCharacterTest.txt (6.6 MB). Both begin with the Unicode copyright/terms header; the rest is tab- and semicolon-separated test vectors with no further licence text, and they are test data used by test/BidiTest.js / test/BidiCharacterTest.js, installed nowhere.
  • src/data/bidiBrackets.data.js, bidiCharTypes.data.js and bidiMirroring.data.js say only auto generated; their generator scripts/generateBidiData.js is shipped and fetches the UCD 13.0.0 files from unicode.org, which is what the Files: src/data/* stanza's Comment and Unicode copyright describe. The data is committed, and the only build step is rollup -c, so nothing regenerates it or needs the network at build time.
  • No vendored or embedded third-party code or licence: LICENSE.txt is the only file of licence text, no GPL/LGPL/Apache/MPL/CC/SPDX/public-domain wording anywhere, package-lock.json only records devDependency metadata, and the tree ships no node_modules.
  • Packaging checked in full: debian/control, rules, changelog, clean, *.docs, source/format, patches/series and patches/dgit-changes, tests/pkg-js/test, nodejs/build, upstream/metadata. Build-Depends names are all real: debhelper 14.5 Provides dh-sequence-single-binary, dh-nodejs 0.17.14 Provides dh-sequence-nodejs-no-lerna, and rollup 3.30.0, node-rollup-plugin-buble and node-rollup-plugin-terser are in the archive (apt-cache).
  • debian/patches/dgit-changes holds the entire Debian delta (CommonJS rollup config, Debian's plugin module names, terser maxWorkers: 1) and is in patches/series; .pc/debian/dgit-changes shows it applied to the tree.
  • dist/ is absent from the upstream tarball and tree (in .gitignore, removed by debian/clean) and is built from src/ by the shipped rollup.config.js, so the esm/umd/minified bundles have their source in the package; nothing minified is shipped unbuilt.
  • debian/tests/pkg-js/test is the pkg-js autopkgtest script for Testsuite: autopkgtest-pkg-nodejs and is also used by the nodejs buildsystem as the build-time test (sub test in /usr/share/perl5/Debian/Debhelper/Buildsystem/nodejs.pm falls back to debian/tests/pkg-js/test); it exercises the built bidi-js module, which the packaging installs under /usr/share/nodejs/bidi-js.
  • No missing or wrong dependency results: dh-nodejs adds only nodejs:any to misc:Depends (addsubstvar $package, "misc:Depends", 'nodejs:any' in nodejs.pm), and the shipped module requires nothing at runtime; require-from-string is used only by test/runTestsOnBuild.js, which is not installed.
  • Standards-Version 4.7.4 against Policy 4.7.4.1 (first two components current), changelog unstable with a valid Thursday date and an ITP closure; no maintainer scripts, no missing ${misc:Depends} issue at compat 14.
  • The orig tarball member node-bidi-js-1.0.2/package.json matches the tree's package.json (same devDependencies, "license": "MIT"), so no Debian-specific edit hides in it.
  • uscan found the packaged version as the newest upstream release (upstream 1.0.2, packaged 1.0.2).
Not confirmed ◂
  • The read tool listed only the top-level entry of node-bidi-js_1.0.2.orig.tar.xz, so the full member list of the upstream tarball was not enumerated; members were spot-checked (package.json) and the .dsc checksums correspond to the tarballs present. debian/copyright has no Files-Excluded, so no repacking is expected.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 7 hours ago.

Back to Dashboard | View all reviews for this package