node-qrcode 1.5.4-1
Package Information
| Description | QR code generator for Node.js and browsers This library encodes text and binary data as QR codes, with support for numeric, alphanumeric, byte and Kanji encoding modes. It automatically selects encoding segments and offers configurable error correction levels, symbol sizes, margins and colours. QR codes can be rendered as PNG or SVG images, drawn on a canvas, or displayed in a terminal. A command-line utility can generate images and terminal output. |
|---|---|
| Maintainer | Home Assistant Team <team+homeassistant@tracker.debian.org> |
| Changed By | Edward Betts <edward@4angle.com> |
| Sponsor | edward@debian.org |
| Distribution | unstable |
| Architecture | all |
| VCS | git: https://salsa.debian.org/homeassistant-team/js/node-qrcode.git (browse) |
| Closes | #1151715 |
| Tracker | https://tracker.debian.org/pkg/node-qrcode |
| Uploaded | 4 hours ago |
New Package Report
.changes
| Distribution | unstable |
|---|---|
| Date | Fri, 23 Oct 2026 11:42:59 +0100 |
| Source | node-qrcode |
| Version | 1.5.4-1 |
| Changed-By | Edward Betts <edward@4angle.com> |
| Architecture | all source |
Changelog
node-qrcode (1.5.4-1) unstable; urgency=medium . * Initial release. (Closes: #1151715)
.dsc
| Section | javascript |
|---|---|
| Priority | optional |
| Component | main |
| Package-List | node-qrcode deb javascript optional arch=all |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: qrcode
Upstream-Contact: Ryan Day <soldair@gmail.com>
Source: https://github.com/soldair/node-qrcode
Files: *
Copyright: 2012 Ryan Day
License: Expat
Files: lib/core/qrcode.js
Copyright: 2009 Kazuhiko Arase
2011 Ryan Day
License: Expat
Files: examples/vendors/excanvas/*
Copyright: 2006 Google Inc.
License: Apache-2.0
Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: Expat
License: Expat
Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation
files (the "Software"), to deal in the Software without
restriction, including without limitation the rights to use,
copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following
conditions:
.
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
OTHER DEALINGS IN THE SOFTWARE.
License: Apache-2.0
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
.
http://www.apache.org/licenses/LICENSE-2.0
.
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
.
On Debian systems, the complete text of the Apache License, Version 2.0
can be found in /usr/share/common-licenses/Apache-2.0.
DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor
This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.
Reviewed 3 hours ago.
Report
DFSG NEW review for node-qrcode version 1.5.4-1
Summary
- Licensing is DFSG-compliant and
debian/copyrightis accurate: Yes - Packaging is of good quality: Yes
- Issues: 0 blocker, 0 important, 0 minor
- debian/watch: version 5
- debian/copyright: machine-readable
- Scan before the review: nothing found
Licensing
debian/copyright is DEP-5 machine-readable and accurately describes the tree. The whole project is MIT (Expat), matching the top-level license file ("The MIT License (MIT)", Copyright 2012 Ryan Day) and per-file headers (lib/index.js, lib/core/qrcode.js). The Files: * Expat catch-all covers the bulk; the specific stanza for lib/core/qrcode.js (Kazuhiko Arase 2009 + Ryan Day 2011) and examples/vendors/excanvas/* (Google Inc. 2006, Apache-2.0, with the Apache header present in both excanvas.js and excanvas.compiled.js) are correct. The standalone Expat text is reproduced; Apache-2.0 points to /usr/share/common-licenses. Licenses (MIT + Apache-2.0) are compatible. No non-free terms, no unlicensed files. The only prebuilt artifact, excanvas.compiled.js, has its source excanvas.js alongside and neither is installed in the binary, so no DFSG-preferred-form concern.
Packaging
Packaging follows current practice: debhelper compat 14, simple dh $@ rules, source format 3.0 (quilt) with a single dgit-combined patch. Build/runtime deps match package.json exactly (dijkstrajs, pngjs, yargs at runtime; canvas, htmlparser2, sinon, tap with <!nocheck> for tests). Deps split correctly (Build-Depends vs Depends), Architecture: all on a nodejs module, homeassistant-team Maintainer/Vcs fields consistent, autopkgtest configured via dh-sequence-nodejs + debian/tests/pkg-js. Changelog sane (initial release, closes #1151715). Standards-Version 4.7.4 against current Policy 4.7.4.1 is fine. lintian-override for the prebuilt excanvas.js is justified (source alongside, neither installed). The Debian patch removes the stale excanvas reference from clientside.html and fixes tap assertions for the current tap.
Issues
None.
Verified
- Prescan author check named every copyright holder found; all are present in debian/copyright under matching stanzas (Ryan Day, Kazuhiko Arase, Google Inc., Edward Betts).
- examples/vendors/excanvas/excanvas.compiled.js is a minified copy of excanvas.js (same Apache-2.0 header); its readable source is present in the tree, and neither is installed (
debian/node-qrcode.examplesglobsexamples/*.js,examples/*.html,examples/images/— direct children only). - examples/images/bacon-love.png is an example image shipped by upstream, covered by the
Files: *Expat stanza; no restrictive terms. - License names match texts:
Expatequals the MIT text inlicense,lib/index.jsandlib/core/qrcode.js;Apache-2.0matches the header in the excanvas files and is in common-licenses. - debian/control Depends (misc:Depends, node-dijkstrajs, node-pngjs, node-yargs) match package.json runtime dependencies; test-only deps are marked <!nocheck> per compat 14+.
- No files lack a licence; no generated code without generator input beyond the excanvas minified copy (source present).
- uscan found upstream releases with
debian/watch; a newer upstream version is available (upstream21, packaged1.5.4), which is not a fault of the package. - Every pointer of
debian/copyrightto /usr/share/common-licenses names a file that is there (Apache-2.0).
Not confirmed
None.
Proposed changes
None.
Uploader's response to the LLM review
The uploader was emailed about the review 2 hours ago.