DFSG NEW Queue

DFSG, Licensing & New Packages Team

node-rollup-plugin-iife-split 0.0.6-1

Package Information

DescriptionRollup plugin for code splitting with IIFE output

Shared modules are merged into a primary entry point, and secondary entry points access their exports through a configurable global variable. Each output bundle is wrapped in an immediately invoked function expression (IIFE).

Selected modules can be excluded from sharing and duplicated in each entry point that imports them. External modules can be mapped to global variables, and output banners and footers are preserved outside the IIFE wrappers.

MaintainerHome Assistant Team <team+homeassistant@tracker.debian.org>
Changed ByEdward Betts <edward@4angle.com>
Sponsoredward@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/homeassistant-team/js/node-rollup-plugin-iife-split.git (browse)
Closes#1152929
Trackerhttps://tracker.debian.org/pkg/node-rollup-plugin-iife-split
Uploaded3 hours ago

New Package Report

.changes◂
Architectureall source
Distributionunstable
DateTue, 03 Nov 2026 09:57:24 +0000
Sourcenode-rollup-plugin-iife-split
Version0.0.6-1
Changed-ByEdward Betts <edward@4angle.com>
Changelog◂
node-rollup-plugin-iife-split (0.0.6-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1152929)
.dsc◂
Package-Listnode-rollup-plugin-iife-split deb javascript optional arch=all
Sectionjavascript
Priorityoptional
Componentmain
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: rollup-plugin-iife-split
Upstream-Contact: Adam Shaw
Source: https://github.com/arshaw/rollup-plugin-iife-split

Files: *
Copyright: Adam Shaw
License: Expat

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: Expat


License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for node-rollup-plugin-iife-split version 0.0.6-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 with the correct Format: URL, a Files: * stanza (Adam Shaw, Expat), a Files: debian/* stanza (2026 Edward Betts, Expat) and the full Expat text. Upstream's package.json ("license": "MIT") and README.md (## License / MIT) agree, no file in the tree carries a different notice, nothing third-party is bundled and no non-free wording occurs anywhere. The absence of an upstream LICENSE file does not change the grant recorded in the package.

Packaging

Compat 14 with the pkg-js dh sequences and single-binary, a minimal rules, a build script that compiles src/ with tsc and fixes ESM import extensions, extlinks/clean files, Depends matching the runtime imports, autopkgtest wired through debian/tests/pkg-js/test, and a sane changelog, control and upstream metadata. No patches, no maintainer scripts; nothing here a sponsor would require changed.

Issues

None.

Verified ◂
  • Read debian/copyright in full: DEP-5, exact copyright-format 1.0 Format:, Files: * → Copyright: Adam Shaw / License: Expat, Files: debian/* → Copyright: 2026 Edward Betts <edward@4angle.com> / License: Expat, and a stand-alone License: Expat paragraph with the complete permission text (Expat is not in /usr/share/common-licenses, so embedding it is required and done).
  • Searched the whole upstream tree (src/, test/ and its fixtures, README.md, CHANGELOG.md, CLAUDE.md, tsconfig.json, .npmrc, .gitignore, .claude/settings.local.json) for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU, Apache License, Mozilla Public, public domain, All rights reserved, non-commercial: no copyright notices, no third-party code, no restricted terms. pnpm-lock.yaml holds only package names, versions and integrity hashes, no licence metadata.
  • Upstream has no LICENSE/COPYING file; the Expat grant rests on package.json ("license": "MIT") and README.md, both read. No Files-Excluded is needed: the orig tarball is the plain upstream tree, with nothing removed.
  • Prescan (dfsg-author-check): it listed no files as suspect and reported every holder it found named in debian/copyright (2 declared, 48 files scanned).
  • No built, minified, PDF or archive files in the upstream tree: dist/ is absent from the orig tarball, produced during the build by debian/nodejs/build (tsc --noCheck over src/) and removed by debian/clean (dist/, .temp/); there is no node_modules and no vendored code. The test fixtures are trivial hand-written modules (checked basic/, multi-shared/, unshared/locale-en.js, unshared/locales-all.js).
  • Read all of debian/: control, rules, changelog, copyright, clean, node-rollup-plugin-iife-split.docs, nodejs/build, nodejs/extlinks, source/format, tests/pkg-js/test, tests/pkg-js/run-tests.cjs, tests/pkg-js/node-test.mjs, upstream/metadata. No debian/patches, no maintainer scripts, no gbp.conf.
  • debian/control: compat 14 (recommended), dh-sequence-single-binary keeps dh_auto_install's destdir at debian/<pkg> (Dh_Lib tmpdir) so dh_nodejs's install lands directly in the package and no .install file is needed; Depends (rollup, node-magic-string, node-estree-walker, nodejs) matches the runtime imports of src/ (rollup, magic-string, estree-walker, Node builtins only).
  • Build and test dependencies: node-typescript for tsc/ts.transpileModule, rollup and node-estree-walker/node-magic-string for module resolution during tsc --noCheck and for the tests, node-acorn used only by test/chunk-merger.test.ts and linked only when tests are enabled (acorn test in debian/nodejs/extlinks, per Debian::PkgJs::Utils::_extLinks).
  • Autopkgtest: Testsuite: autopkgtest-pkg-nodejs plus debian/tests/pkg-js/test is the implicit-control setup — autodep8 0.31 supports NodeJS packages, and pkg-js-autopkgtest's description states the Testsuite: field is all that is needed; dh_nodejs's own test step also runs this file, so no debian/tests/control is required.
  • Standards-Version: 4.7.4 against the reviewing system's Policy 4.7.4.1: first two components match, so not an issue. changelog (0.0.6-1, unstable, initial release closing #1152929) and upstream/metadata (Bug-Database, Bug-Submit, Repository, Repository-Browse) are consistent with Homepage/Vcs-*.
  • debian/watch was not examined, as instructed.
  • uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 0.0.7, packaged 0.0.6), which is not a fault of the package.
Not confirmed ◂
  • Could not run the build or the test suite. Debian's node-estree-walker is 2.0.2 while upstream declares ^3.0.0, but the source only uses walk() and this.skip() (chunk-merger.ts, esm-to-iife.ts), which 2.0.2 provides, and the upstream suite runs during the build, so this is not reported as an issue.
  • node-typescript in unstable is 6.0.3 and is not installed on the reviewing system, so I could not check that tsc --noCheck is still accepted there; the maintainer's build is the evidence that it is.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package