node-kdbush 4.1.0-1
Package Information
| Description | static spatial index for two-dimensional points This library supports bounding-box and radius queries on a fixed set of two-dimensional points using a flat KD-tree. Queries return identifiers that refer to the order in which points were added. The index is stored in an array buffer, allowing it to be saved to a file, transferred between threads or shared between workers, and reconstructed without rebuilding the index. |
|---|---|
| Maintainer | Home Assistant Team <team+homeassistant@tracker.debian.org> |
| Changed By | Edward Betts <edward@4angle.com> |
| Sponsor | edward@debian.org |
| Distribution | unstable |
| Architecture | all |
| VCS | git: https://salsa.debian.org/homeassistant-team/js/node-kdbush.git (browse) |
| Closes | #1152475 |
| Tracker | https://tracker.debian.org/pkg/node-kdbush |
| Uploaded | 3 hours ago |
New Package Report
.changes
| Version | 4.1.0-1 |
|---|---|
| Changed-By | Edward Betts <edward@4angle.com> |
| Architecture | all source |
| Distribution | unstable |
| Date | Thu, 29 Oct 2026 17:41:54 +0000 |
| Source | node-kdbush |
Changelog
node-kdbush (4.1.0-1) unstable; urgency=medium . * Initial release. (Closes: #1152475)
.dsc
| Section | javascript |
|---|---|
| Priority | optional |
| Component | main |
| Package-List | node-kdbush deb javascript optional arch=all |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: kdbush Upstream-Contact: Vladimir Agafonkin <agafonkin@gmail.com> Source: https://github.com/mourner/kdbush Files: * Copyright: 2026, Vladimir Agafonkin License: ISC Files: debian/* Copyright: 2026 Edward Betts <edward@4angle.com> License: ISC License: ISC Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. . THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor
This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.
Reviewed 2 hours ago.
Report
DFSG NEW review for node-kdbush version 4.1.0-1
Summary
- Licensing is DFSG-compliant and
debian/copyrightis accurate: Yes - Packaging is of good quality: Yes
- Issues: 0 blocker, 0 important, 0 minor
- debian/watch: version 5
- debian/copyright: machine-readable
- Scan before the review: nothing found
Licensing
debian/copyright is valid DEP-5, with a Files: * stanza naming Vladimir Agafonkin and ISC, a debian/* stanza for Edward Betts, and the full ISC text reproduced. Every upstream file (LICENSE, index.js, test.js, bench.js, configs, package.json, package-lock.json, README.md, .gitignore, .github workflow) is covered by Files: *, and LICENSE, package.json and package-lock.json all say ISC. No third-party or vendored code, no non-free terms, and the licence is DFSG-compliant.
Packaging
Clean single-binary node package: debhelper compat 14 with dh-nodejs (no-lerna) and single-binary, Standards-Version 4.7.4 matching Policy 4.7.4.1, 3.0 (quilt) with no patches, minimal dh rules, correct changelog and source/format. The generated index.d.ts, kdbush.js and kdbush.min.js are produced by tsc/rollup through debian/nodejs/build and removed by debian/clean, so no prebuilt files are shipped; the autopkgtest runs the upstream node:test suite with no extra dependencies. Vcs fields, upstream metadata and Build-Depends all check out.
Issues
None.
Verified
- Read debian/copyright in full: DEP-5 Format line exact, two Files stanzas, stand-alone ISC paragraph with the required notice, no Files-Excluded and none needed.
- LICENSE, package.json ("license": "ISC") and package-lock.json (root package ISC) agree with the copyright file; no other copyright holder or licence appears anywhere in the tree.
- The pre-review scan listed only the author check (11 upstream files, every holder found already named in debian/copyright); those 11 files are LICENSE, index.js, test.js, bench.js, eslint.config.js, rollup.config.js, tsconfig.json, package.json, package-lock.json, README.md and .gitignore, and none carries a notice differing from the ISC stanza.
- No third-party or vendored source: package-lock.json is npm metadata for devDependencies and is not installed; .github/workflows/node.yml is upstream CI configuration only.
- The orig tarball contains no prebuilt kdbush.js, kdbush.min.js or index.d.ts; debian/nodejs/build runs tsc then rollup -c against index.js, and debian/clean removes the three generated files, so the preferred form is present.
- debian/control: debhelper-compat (= 14), dh-nodejs, dh-sequence-nodejs-no-lerna and dh-sequence-single-binary (all provided by dh-nodejs/debhelper 14.5 in the archive), node-typescript 6.0.3, rollup 3.30.0 and node-rollup-plugin-terser 7.0.2 exist; relationship substvars are added by dh_gencontrol at compat 14.
- Standards-Version 4.7.4 against Policy 4.7.4.1 is current; Section javascript, Architecture all, Homepage and both Vcs fields are consistent.
- debian/rules is a plain dh $@; debian/source/format is 3.0 (quilt) with no patches/ directory or series, so no patch review applies.
- debian/changelog: version 4.1.0-1, unstable, initial release closing #1152475, valid maintainer/date (29 Oct 2026 is a Thursday).
- debian/tests/pkg-js/test runs node --test test.js; the tests use only node:test/node:assert and the source index.js, and Testsuite: autopkgtest-pkg-nodejs is a known autopkgtest testsuite.
- debian/upstream/metadata has Bug-Database, Bug-Submit and Repository fields; debian/node-kdbush.docs installs README.md.
- uscan found the packaged version as the newest upstream release (upstream
4.1.0, packaged4.1.0).
Not confirmed
- Whether the archive's node-rollup-plugin-terser (7.0.2+~cs8.6.7-1, described as the legacy rollup-plugin-terser and lacking a node-rollup-pluginutils dependency) also installs the scoped module /usr/share/nodejs/@rollup/plugin-terser that debian/nodejs/extlinks asks dh-nodejs for and rollup.config.js imports; its .deb contents are not on this system. A clean build would show whether dh_auto_configure reports '@rollup/plugin-terser is required by debian/nodejs/extlinks but not available', and whether Debian's rollup 3.30.0 accepts a config written for upstream's rollup ^4.60.4.
- Why the model asked for what a review has no use for. During this review it asked once for something outside the package and the reviewing system (another file of the sandbox, or a URL), or was given part of the review tooling's own configuration, and that was refused or withheld. A model does this when something it has read tells it to, so look in the package for text addressed to a reviewing program, and treat this report with suspicion. Refused:
read: "xd://policy/?search=Multi-Arch" is not a file of the package or of the reviewing system.
Proposed changes
None.
Uploader's response to the LLM review
The uploader was emailed about the review 2 hours ago.