node-murmurhash-js 1.0.0-1

Package Information

Description	JavaScript implementation of MurmurHash algorithms MurmurHash is a family of non-cryptographic hash functions for hash-based lookup. These functions convert strings into numeric hash values for use in hash tables. They are not intended for cryptographic purposes. This module implements two versions of the algorithm, MurmurHash2 and MurmurHash3. Both accept an ASCII string and an initial integer seed and produce an unsigned 32-bit hash value. MurmurHash3 is the default exported function.
Maintainer	Home Assistant Team <team+homeassistant@tracker.debian.org>
Changed By	Edward Betts <edward@4angle.com>
Sponsor	edward@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/homeassistant-team/js/node-murmurhash-js.git (browse)
Closes	#1153521
Tracker	https://tracker.debian.org/pkg/node-murmurhash-js
Uploaded	10 hours ago

New Package Report

.changes◂

Distribution	unstable
Date	Mon, 09 Nov 2026 13:34:39 +0000
Source	node-murmurhash-js
Version	1.0.0-1
Changed-By	Edward Betts <edward@4angle.com>
Architecture	all source

Changelog◂

node-murmurhash-js (1.0.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1153521)

.dsc◂

Priority	optional
Component	main
Package-List	node-murmurhash-js deb javascript optional arch=all
Section	javascript

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: murmurhash-js
Upstream-Contact: Gary Court <gary.court@gmail.com>
Source: https://github.com/mikolalysenko/murmurhash-js

Files: *
Copyright: 2011 Gary Court
License: Expat

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 7 hours ago.

Report◂

DFSG NEW review for node-murmurhash-js version 1.0.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

All upstream files are MIT/Expat: README.md carries the full permission notice for Gary Court (2011), package.json says "license": "MIT", and none of the code files carries a different notice, so Files: * with Copyright: 2011 Gary Court / License: Expat covers every upstream path correctly. The packaging itself (debian/*) is Edward Betts under Expat. debian/copyright is DEP-5 with the correct 1.0 Format URL, and the Expat text is reproduced in full; no non-free terms, no generated or minified files, nothing needing Files-Excluded.

Packaging

Small, conventional node package: compat 14 with plain dh $@, dh-nodejs + dh-sequence-nodejs-no-lerna + dh-sequence-single-binary, one arch:all binary, Standards-Version 4.7.4, Vcs-* and Homepage set, an initial-release changelog closing the ITP, and a non-empty autopkgtest test through Testsuite: autopkgtest-pkg-nodejs. The only open question is cosmetic-to-functional: the pkg-js test script names its own test file by a source-tree-relative path, which may not exist in the autopkgtest testbed.

Issues

None.

Verified ◂

Read the whole tree: README.md, index.js, murmurhash2_gc.js, murmurhash3_gc.js, package.json, plus all of debian/ (control, rules, changelog, copyright, node-murmurhash-js.docs, watch, source/format, tests/pkg-js/test, tests/pkg-js/test.cjs, upstream/metadata). Ten files in total; .pc/ left out as instructed.
Copyright evidence: the only copyright notice in the source is Copyright (c) 2011 Gary Court in the ## License (MIT) section of README.md; package.json has "license": "MIT" and "author": "Gary Court"; index.js and the two algorithm files carry no notice of their own. All of this matches Files: * / Copyright: 2011 Gary Court / License: Expat.
murmurhash2_gc.js and murmurhash3_gc.js name Austin Appleby only in jsdoc tags (@author <a href="mailto:aappleby@gmail.com">Austin Appleby</a>, @see http://sites.google.com/site/murmurhash/), crediting the author of the original C algorithm; no copyright notice names him, so no additional holder is missing from debian/copyright. The prescan's holder check likewise found every holder named.
No LICENSE/COPYING/NOTICE/AUTHORS file upstream; the Expat notice that MIT requires be retained is present in README.md and reproduced verbatim in the License: Expat paragraph. debian/copyright is machine-readable, Format: is the 1.0 URL, and it needs no replacement.
No binary, built, minified, bundled or generated files, and no fonts, images, audio or data files: the five upstream files are hand-written CommonJS sources plus a README and a package.json. Nothing is vendored, and package.json declares no dependencies.
debian/* is 2026 Edward Betts under Expat, matching the Files: debian/* stanza and the maintainer/uploader in debian/control.
Packaging: debhelper-compat (= 14), dh $@ only, no patches and no debian/patches/series; source format 3.0 (quilt). Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1 (first two components).
Build dependencies exist in the archive: dh-nodejs 0.17.14 provides dh-sequence-nodejs-no-lerna (apt-cache), debhelper 14.5 provides dh-sequence-single-binary; dh-nodejs also pulls nodejs:any, which is what runs the pkg-js test at build time.
No ${misc:Depends} in the binary stanza is correct at compat 14: dh_gencontrol injects relationship substvars itself (debhelper(7), "Automatic injection of substvar dependencies"). The nodejs buildsystem only adds nodejs:any by itself for packages that install a program in /usr/s?bin, which this library does not; plain node modules (node-underscore, node-minimist) likewise declare no explicit nodejs dependency.
Testsuite: autopkgtest-pkg-nodejs with debian/tests/pkg-js/test present and non-empty (lintian's pkg-js-autopkgtest-test-is-missing/-is-empty conditions satisfied); the script runs debian/tests/pkg-js/test.cjs, which requires the installed module murmurhash-js, the name under which dh-nodejs installs it in /usr/share/nodejs.
uscan found the packaged version as the newest upstream release (upstream 1.0.0, packaged 1.0.0).

Not confirmed ◂

debian/tests/pkg-js/test runs node debian/tests/pkg-js/test.cjs, a path relative to the source tree root. pkg-js-autopkgtest is not installed on the reviewing system, so I could not check whether it runs the script with the source tree as working directory (where this works, and where pkg-js-tools also runs it at build time) or from a temporary testbed holding only copies of debian/tests/pkg-js/* (where the path would not exist and the autopkgtest would fail). node ./test.cjs would work in both cases; an autopkgtest run would settle it.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 7 hours ago.

Back to Dashboard | View all reviews for this package