node-potpack 2.1.0-1

Package Information

Description	JavaScript library for packing rectangles into a container Packs two-dimensional rectangles into a near-square container and assigns coordinates to each rectangle. The layout is static, with all rectangles supplied before packing. The result includes the container dimensions and the fraction of its area occupied by the rectangles.
Maintainer	Home Assistant Team <team+homeassistant@tracker.debian.org>
Changed By	Edward Betts <edward@4angle.com>
Sponsor	edward@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/homeassistant-team/js/node-potpack.git (browse)
Closes	#1152477
Tracker	https://tracker.debian.org/pkg/node-potpack
Uploaded	2 hours ago

New Package Report

.changes◂

Version	2.1.0-1
Changed-By	Edward Betts <edward@4angle.com>
Architecture	all source
Distribution	unstable
Date	Thu, 29 Oct 2026 17:49:43 +0000
Source	node-potpack

Changelog◂

node-potpack (2.1.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1152477)

.dsc◂

Component	main
Package-List	node-potpack deb javascript optional arch=all
Section	javascript
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: potpack
Upstream-Contact: Vladimir Agafonkin <agafonkin@gmail.com>
Source: https://github.com/mapbox/potpack

Files: *
Copyright: 2025, Mapbox
License: ISC

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: ISC

License: ISC
 Permission to use, copy, modify, and/or distribute this software for any purpose
 with or without fee is hereby granted, provided that the above copyright notice
 and this permission notice appear in all copies.
 .
 THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
 REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
 FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
 INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
 OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
 TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
 THIS SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for node-potpack version 2.1.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

Every upstream file is covered by one ISC licence: LICENSE carries Copyright (c) 2025, Mapbox and the ISC permission text, and debian/copyright (already DEP-5) reproduces it verbatim under Files: * with the same holder, plus a debian/* stanza for the packaging. No other copyright holder or licence appears anywhere in the tree, and the prescan confirmed every holder it found is named. ISC is DFSG-free and its full notice is present (it is not in /usr/share/common-licenses), so the licence text is reproduced as required.

Packaging

A small, conventional pkg-js package: debhelper compat 14 with plain dh $@, dh-nodejs with the no-lerna sequence and explicit dh-sequence-single-binary (which suppresses the compat-14 implicit-activation warning), node-typescript for the typings build, and every build dependency present in the archive. The single Debian delta is a dgit single-patch that makes upstream's test resolve the installed module, debian/clean removes the generated index.d.ts, the test is reused by dh_auto_test and by the autopkgtest-pkg-nodejs suite, and changelog, Vcs-*, Homepage and Standards-Version 4.7.4 (Policy is 4.7.4.1) are all in order.

Issues

None.

Verified ◂

Read all of debian/ (changelog, clean, control, copyright, node-potpack.docs, rules, source/format, patches/dgit-changes and series, nodejs/build, tests/pkg-js/test, upstream/metadata), the .dsc and the orig tarball listing.
Read all 11 upstream files (LICENSE, README.md, index.js, test.js, bench.js, eslint.config.js, index.html, package.json, package-lock.json, tsconfig.json, .gitignore) and .github/workflows/node.yml.
LICENSE is ISC, Copyright (c) 2025, Mapbox; debian/copyright reproduces that text line for line and names the same holder under Files: *, with Files: debian/* (later stanza, so it overrides) for Edward Betts' packaging work. The prescan's author check found no holder missing.
A tree-wide grep for Copyright, (c), ©, SPDX-License-Identifier, License, public domain and All rights reserved found only "license": "ISC" in package.json and the per-dev-dependency license metadata in package-lock.json. package-lock.json resolves lint/build tooling (@mapbox/shelf-pack, bin-pack, eslint, eslint-config-mourner, typescript) but vendors none of their code, so Files: * describing it as Mapbox/ISC is accurate.
index.d.ts is neither in the orig tarball nor in the tree: it is generated at build time by tsc (debian/nodejs/build) from index.js and tsconfig.json, both shipped, and removed again by debian/clean. Reading /usr/share/perl5/Debian/Debhelper/Buildsystem/nodejs.pm confirmed dh-nodejs installs the package.json#files entries (index.js, index.d.ts) plus package.json itself into /usr/share/nodejs/potpack, so the "types" entry resolves in the installed package.
bench.js, index.html, eslint.config.js, tsconfig.json, test.js and .github/workflows/node.yml are not installed; bench.js's third-party imports are dev-only and are never loaded by the build or the test.
debian/patches/dgit-changes is the whole Debian delta (one line: test.js imports 'potpack' instead of './index.js'), so dh_auto_test's run of debian/tests/pkg-js/test resolves the module through the node_modules link at build time and through /usr/share/nodejs in autopkgtest; it does not introduce third-party code.
Build-Depends all exist: dh-sequence-nodejs-no-lerna is provided by dh-nodejs 0.17.14, dh-sequence-single-binary by debhelper 14.5, and node-typescript is 6.0.3 in the archive. No binary Depends field is needed at compat 14 (dh_gencontrol adds the relationship substvars itself); pkg-js packages in the archive (e.g. node-glob) likewise carry no explicit nodejs dependency.
Standards-Version 4.7.4 matches Policy 4.7.4.1 to the two components that matter; changelog is 2.1.0-1 to unstable with an ITP closure and a correctly dated (Thursday) timestamp; Vcs-Git/Vcs-Browser/Homepage agree with the .dsc.
.pc/ and debian/cargo-checksum.json were left out of every search, as instructed.
uscan found the packaged version as the newest upstream release (upstream 2.1.0, packaged 2.1.0).

Not confirmed ◂

No build or test run is possible in this review, so the output of tsc under node-typescript 6.0.3 against this tsconfig was not observed.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package