node-colordx-core 7.3.0-1

Package Information

Description	color parsing and manipulation library for Node.js CSS color strings and color objects can be parsed, converted and manipulated in RGB, HSL, OKLCH and OKLab color spaces. Operations include adjusting lightness, saturation, hue and transparency, and mapping colors into the sRGB gamut using the CSS Color 4 gamut mapping algorithm. Plugins add color spaces such as Display-P3, Lab and Rec2020, together with color mixing, contrast calculations, color harmonies and color vision deficiency simulation. The library provides an immutable object API, standalone parsing and conversion functions, and a compatibility API for tinycolor2.
Maintainer	Home Assistant Team <team+homeassistant@tracker.debian.org>
Changed By	Edward Betts <edward@4angle.com>
Sponsor	edward@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/homeassistant-team/js/node-colordx-core.git (browse)
Closes	#1151186
Tracker	https://tracker.debian.org/pkg/node-colordx-core
Uploaded	2 hours ago

New Package Report

.changes◂

Source	node-colordx-core
Version	7.3.0-1
Changed-By	Edward Betts <edward@4angle.com>
Architecture	all source
Distribution	unstable
Date	Sat, 17 Oct 2026 22:20:05 +0100

Changelog◂

node-colordx-core (7.3.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151186)

.dsc◂

Priority	optional
Component	main
Package-List	node-colordx-core deb javascript optional arch=all
Section	javascript

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: @colordx/core
Upstream-Contact: Dmitrii Kriaklin
Source: https://github.com/dkryaklin/colordx

Files: *
Copyright: 2026 Dmitrii Kriaklin
License: MIT

Files: tests/fixtures/wpt-css-color.json
Copyright: web-platform-tests contributors
License: BSD-3-Clause
Comment: Test data extracted from web-platform-tests at commit
04180c9d23fbc63b5aa26ed1aa107493a10365f8.
Source: https://github.com/web-platform-tests/wpt/tree/04180c9d23fbc63b5aa26ed1aa107493a10365f8/css/css-color/parsing

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: MIT

License: MIT
Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation
files (the "Software"), to deal in the Software without
restriction, including without limitation the rights to use,
copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following
conditions:
.
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
OTHER DEALINGS IN THE SOFTWARE.

License: BSD-3-Clause
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
.
1. Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
.
3. Neither the name of the copyright holder nor the names of its contributors
may be used to endorse or promote products derived from this software
without specific prior written permission.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED.
IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 1 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for node-colordx-core version 7.3.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 1 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

Upstream is MIT (LICENSE and package.json agree), and debian/copyright is DEP-5 and complete: Files: * covers the tree with the upstream holder, the web-platform-tests fixture extracted into tests/fixtures/wpt-css-color.json has its own BSD-3-Clause stanza with the full licence text, and debian/* is attributed. No non-free terms, no built binaries in the source, and the only third-party data is the BSD-3 WPT test fixture and generated numeric reference vectors.

Packaging

Clean packaging: debhelper compat 14, the nodejs dh sequence with a documented Rollup/esbuild build in debian/nodejs/build.cjs and package.json#files choosing dist/ for installation, Build-Depends matching what the build and tests actually import, autopkgtest via autopkgtest-pkg-nodejs with hand-written pkg-js tests, Standards-Version 4.7.4 (current Policy is 4.7.4.1), Vcs fields, and a sensible initial changelog closing the ITP.

Issues

1. [important] [packaging] uscan reports a warning for debian/watch

Files: debian/watch
Basis: found by the review tooling's own checks

Evidence:

In debian/watch no matching files for watch source
  https://api.github.com/repos/dkryaklin/colordx/git/matching-refs/tags/

Problem: uscan must run without errors or warnings and find the upstream releases.
Fix: Correct debian/watch so that uscan --report runs cleanly.

Verified

Prescan listed no files to account for: its author check found every detected copyright holder named in debian/copyright (181 files scanned).
debian/copyright is machine-readable (exact copyright-format 1.0 URL), with Files: * (MIT, 2026 Dmitrii Kriaklin), an overriding stanza for tests/fixtures/wpt-css-color.json (BSD-3-Clause, web-platform-tests contributors, source commit and URL in Comment) and debian/* (MIT, Edward Betts).
LICENSE is MIT, Copyright (c) 2026 Dmitrii Kriaklin, matching the Files: * stanza; no other LICENSE/COPYING/NOTICE/AUTHORS files exist anywhere in the tree.
tests/fixtures/wpt-css-color.json self-declares its provenance and 3-Clause BSD licence (its own source/commit/license fields at lines 2-4), matching the BSD-3-Clause stanza; it is generated test data and its extractor, scripts/wpt-extract.ts, is in the tree.
tests/fixtures/daltonlens.json is numeric reference output generated with daltonlens 0.1 (tests/cvd.test.ts:7-8): coordinate triples only, no creative code; nothing in debian/copyright is misstated by it.
Binary media are project-generated: assets/logo.svg is the master, playground/public/favicon.svg is written from it, and the PNG/ICO icons are rasterised from the same SVG by scripts/gen-logos.ts, which is in the tree.
No minified JS/CSS, archives, class files, .so/.dll/.pyc, PDFs, fonts or dist/ artefacts are present; no node_modules directory is shipped.
src/ is self-contained (no non-relative imports) and tests/tinycolor.test.ts and fuzz-wide.test.ts test compatibility against tinycolor2 rather than vendoring it; no third-party code or holders were found beyond the WPT fixture.
debian/patches/series lists the single dgit-changes patch; it is the dgit combined Debian delta (tests/tight-math.test.ts 4th column), is applied in the tree, and is described in debian/README.source.
Build-Depends names resolve in the archive: esbuild (Provides node-esbuild), rollup (Provides node-rollup), node-rollup-plugin-dts, node-typescript, jest, node-culori and node-expect-type exist; dh-nodejs exists and Provides dh-sequence-nodejs-no-lerna, and debhelper Provides dh-sequence-single-binary.
Test tooling is supplied at build and test time: the checked-in suite imports culori and typescript (provided by node-culori/node-typescript) and jest runs it; the six excluded suites need modules not in Debian and their exclusion is documented in debian/README.source and implemented in debian/tests/pkg-js/jest.config.cjs.
debian/nodejs/build is invoked by pkg-js-tools with sh -ex (checked in /usr/share/perl5/Debian/Debhelper/Buildsystem/nodejs.pm), so it needs no executable bit; the build writes dist/ and debian/clean removes it.
Standards-Version 4.7.4 has the current Policy 4.7.4.1's first two components, so it is current.
Testsuite: autopkgtest-pkg-nodejs matches autodep8's nodejs support (which expands @builddeps@, so the jest/tsc test dependencies are present).

Not confirmed

No build or test run was possible in the review environment, so the Rollup/esbuild/dts build and the Jest/vitest-shim suite were not exercised.
The esbuild and rollup-plugin-dts packages are not installed on the reviewing system, so I could not read their shipped module entry points; require('esbuild') and require('rollup-plugin-dts') in debian/nodejs/build.cjs are unverified. [INFERENCE] Debian's esbuild provides node-esbuild and is expected to ship the Node API.
The exact wording of the upstream WPT LICENSE.md holder was not fetched (no network); the debian/copyright holder follows the fixture's own attribution.

Proposed changes

None.

Back to Dashboard | View all reviews for this package