Review: node-ua-is-frozen 0.1.2-1

Package Information

Description	detector for frozen browser user-agent strings This module checks whether a browser user-agent string matches Chromium's frozen user-agent patterns, which replace detailed platform and browser version information with fixed values. It recognises desktop and Android patterns, including those used by other Chromium-based browsers, and returns a boolean result.
Maintainer	Home Assistant Team <team+homeassistant@tracker.debian.org>
Changed By	Edward Betts <edward@4angle.com>
Sponsor	edward@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/homeassistant-team/js/node-ua-is-frozen.git (browse)
Closes	#1151224
Tracker	https://tracker.debian.org/pkg/node-ua-is-frozen
Uploaded	20 days ago

New Package Report

.changes◂

Date	Sun, 18 Oct 2026 14:25:12 +0100
Source	node-ua-is-frozen
Version	0.1.2-1
Changed-By	Edward Betts <edward@4angle.com>
Architecture	all source
Distribution	unstable

Changelog◂

node-ua-is-frozen (0.1.2-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151224)

.dsc◂

Component	main
Package-List	node-ua-is-frozen deb javascript optional arch=all
Section	javascript
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: ua-is-frozen
Upstream-Contact: Faisal Salman <f@faisalman.com>
Source: https://github.com/faisalman/ua-is-frozen

Files: *
Copyright: 2023 Faisal Salman
License: MIT

Files: debian/*
Copyright: 2026 Edward Betts <edward@4angle.com>
License: MIT


License: MIT
 Permission is hereby granted, free of charge, to any person
 obtaining a copy of this software and associated documentation
 files (the "Software"), to deal in the Software without
 restriction, including without limitation the rights to use,
 copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the
 Software is furnished to do so, subject to the following
 conditions:
 .
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
 OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
 HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
 WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
 OTHER DEALINGS IN THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 20 days ago.

Report◂

DFSG NEW review for node-ua-is-frozen version 0.1.2-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The whole tree is MIT: upstream LICENSE names Faisal Salman (2023), src/index.ts and the dist/ artifacts carry an MIT notice, and package.json declares MIT. debian/copyright is DEP-5 and matches every file: Files: * for upstream, Files: debian/* for the packaging, with the full MIT text (MIT is not in /usr/share/common-licenses). No non-free terms, no unlicensed files, and no vendored third-party code; dist/ is generated JavaScript whose TypeScript source (src/index.ts) is shipped.

Packaging

Small, clean, modern packaging: debhelper compat 14 with debian/rules just 'dh $@', dh-nodejs with the no-lerna and single-binary sequences (both names verified as provided by dh-nodejs 0.17.13 and debhelper 14.5), Standards-Version 4.7.4 against Policy 4.7.4.1, sensible Build-Depends including mocha <!nocheck>, an autopkgtest command in debian/tests/pkg-js/test with Testsuite: autopkgtest-pkg-nodejs, correct Vcs-* and Homepage fields, and a valid initial-release changelog for unstable. The one quilt patch is applied, limited to making the test require the installed module, and consistent with the tree.

Issues

None.

Verified ◂

Read every file in the tree (24 files outside .pc/): LICENSE, README.md, package.json, package-lock.json, tsconfig.json, .gitignore, src/index.ts, test/test.js, dist/cjs/{index.js,index.d.ts}, dist/esm/{index.js,index.d.ts,package.json}, .github/funding.yml, .github/workflows/npm-publish.yml, and all of debian/.
dist/cjs/index.js, dist/esm/index.js and both index.d.ts files carry the MIT notice and are the tsc output of src/index.ts; the preferred form for modification is present in the source package, so dist/ is not a DFSG problem.
src/index.ts carries 'MIT License' and Author: Faisal Salman; LICENSE is the standard MIT text with 'Copyright (c) 2023 Faisal Salman', matching the Files: * stanza.
package-lock.json is npm dependency metadata only (devDependencies mocha and typescript); it contains no vendored code, and node_modules is not shipped.
.github/workflows/npm-publish.yml and .github/funding.yml are upstream CI and funding configuration, covered by the Files: * MIT stanza; they are not part of the installed package.
The prescan's author check reported that every holder found is named in debian/copyright; no file was listed, and no other copyright notice exists anywhere in the tree besides LICENSE and debian/copyright.
debian/copyright is DEP-5, has no Files-Excluded (none are needed), and includes the full MIT text because MIT is not in /usr/share/common-licenses.
debian/control dependencies checked with apt-cache: dh-sequence-single-binary is provided by debhelper 14.5, dh-sequence-nodejs-no-lerna by dh-nodejs 0.17.13, and mocha exists (12.0.3); nothing is missing or misspelled.
Policy is 4.7.4.1; Standards-Version 4.7.4 has the same first two components, so it is current enough.
debian/patches/series lists dgit-changes, a single combined patch whose only hunk changes test/test.js to require the installed 'ua-is-frozen'; the file in the tree already has that change, so the patch is consistent and applies.
debian/rules is 'dh $@' with compatible debhelper compat 14; the nodejs build system installs dist/ plus package.json through the package.json 'files' field and runs debian/tests/pkg-js/test during the build, with mocha declared in Build-Depends <!nocheck>.
debian/changelog is a valid initial release to unstable with an ITP closure, and debian/upstream/metadata has valid Bug-Database, Bug-Submit and Repository fields.
uscan found the packaged version as the newest upstream release (upstream 0.1.2, packaged 0.1.2).

Not confirmed ◂

No build or autopkgtest was run (read-only review); from the package alone the build/test wiring appears complete, as recorded under verified.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 19 days ago.

Review Information

accepted — allocated to awm 19 days ago, started 19 days ago, completed 19 days ago.

Final Comment

Back to Dashboard | View all reviews for this package