node-pngjs 3.0.0-1

Package Information

Description	PNG image encoder and decoder for Node.js This module reads PNG images with grayscale, truecolor or indexed color, including transparency, interlacing and bit depths of 1, 2, 4, 8 and 16 bits. It writes 8-bit RGB and RGBA images and provides synchronous and asynchronous interfaces for reading and writing image data. It also supports copying rectangular pixel regions and adjusting gamma.
Maintainer	Home Assistant Team <team+homeassistant@tracker.debian.org>
Changed By	Edward Betts <edward@4angle.com>
Sponsor	edward@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/homeassistant-team/js/node-pngjs.git (browse)
Closes	#1151711
Tracker	https://tracker.debian.org/pkg/node-pngjs
Uploaded	1 hour ago

New Package Report

.changes◂

Changed-By	Edward Betts <edward@4angle.com>
Architecture	all source
Distribution	unstable
Date	Fri, 23 Oct 2026 10:03:45 +0100
Source	node-pngjs
Version	3.0.0-1

Changelog◂

node-pngjs (3.0.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151711)

.dsc◂

Package-List	node-pngjs deb javascript optional arch=all
Section	javascript
Priority	optional
Component	main

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: pngjs
Upstream-Contact: Luke Page <luke.a.page@gmail.com>
Source: https://github.com/pngjs/pngjs

Files: *
Copyright: 2015 Luke Page & Original Contributors
           2012 Kuba Niegowski
License: Expat

Files: test/imagediff.js
Copyright: 2011-2012 Carl Sutherland, Humble Software
License: Expat

Files: test/in/*
Copyright: 1995-1996, 2011 Willem van Schaik <willem@schaik.com>
License: PngSuite

Files: test/in/large.png
       test/in/gh-21.png
Copyright: 2015 Luke Page & Original Contributors
           2012 Kuba Niegowski
License: Expat

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: Expat


License: Expat
 Permission is hereby granted, free of charge, to any person
 obtaining a copy of this software and associated documentation
 files (the "Software"), to deal in the Software without
 restriction, including without limitation the rights to use,
 copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the
 Software is furnished to do so, subject to the following
 conditions:
 .
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
 OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
 HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
 WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
 OTHER DEALINGS IN THE SOFTWARE.

License: PngSuite
 Permission to use, copy, modify and distribute these images for any
 purpose and without fee is hereby granted.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 0 hours ago.

Report◂

DFSG NEW review for node-pngjs version 3.0.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: 6 found

Licensing

debian/copyright is DEP-5 machine-readable with the correct Format URL. All sources are Expat/MIT (free, license text reproduced or common) or PngSuite (free, permission text reproduced in full). Every file in the tree is covered: Files: * (Expat) covers lib/, examples/, test/.js/html and root files; test/imagediff.js has its own MIT stanza; test/in/ gets the PngSuite stanza, with test/in/large.png and gh-21.png overridden back to Expat. The author-check scan reports that every holder found is named, and I confirm the root LICENSE (Expat text) and test/in/PngSuite.LICENSE match their stanzas. No non-free terms, no missing licence, no built artifacts.

Packaging

Clean, conventional dh-nodejs single-binary package at compat 14. Build-Depends are correct (debhelper-compat 14, dh-nodejs, dh-sequence-nodejs-no-lerna, dh-sequence-single-binary, node-tape and node-buffer-equal marked <!nocheck>); all exist in the archive (apt-cache). Autopkgtest (Testsuite: autopkgtest-pkg-nodejs) runs the upstream tape suite with xvfb-style wrappers correctly handled by compat 13+ nocheck behaviour. No Depends field is required of the library (substvars are auto-added at compat 14). Standards-Version 4.7.4 matches current Policy 4.7.4.1. Changelog, Vcs-* and upstream/metadata are coherent. The debian/source/lintian-overrides file justifying lib/filter-pack.js as readable source is accurate.

Issues

None.

Verified

All 6 prescan-flagged binaries (test/in/xcrn0g04.png, xlfn0g04.png, xs1n0g01.png, xs2n0g01.png, xs4n0g01.png, xs7n0g01.png) are PngSuite corrupt/edge test images (x-prefixed, expected to error in convert-images-spec.js); they are free test data under the PngSuite stanza, not built artifacts.
test/in/PngSuite.png, PngSuite.README, PngSuite.LICENSE all sit under Files: test/in/* and carry the free PngSuite permission text, whose full text is reproduced verbatim in the stand-alone License: PngSuite paragraph.
test/png-parse-data/*.png (8 small synthetic images used only by test/png-parse-spec.js) fall under the Expat catch-all with no separate holder; the author scan confirms no holder is missing from debian/copyright.
Root LICENSE is the full Expat/MIT text matching Files: *; test/imagediff.js header (2011-2012 Carl Sutherland, Humble Software, MIT) matches its stanza and the Expat paragraph.
Only licence/notice file in the tree is the root LICENSE (no vendored code with its own licence); imagediff.js is the sole embedded third-party element and is correctly attributed.
debian/control, rules, changelog, source/format, clean, docs, examples, upstream/metadata, lintian-overrides and the autopkgtest test script were read in full; node-tape and node-buffer-equal verified present in the archive via apt-cache.
Standards-Version 4.7.4 is current (Policy is 4.7.4.1); hardening default via dh at compat 14.
uscan found the packaged version as the newest upstream release (upstream 3.0.0, packaged 3.0.0).

Not confirmed

Could not verify execute permissions on debian/tests/pkg-js/test (no shell access), so a non-executable autopkgtest script would only be caught by the archive's autopkgtest run; the script content itself is correct.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package