DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: node-uplot 1.6.32+ds3-1

Package Information

Descriptionsmall, fast chart for time series, lines, areas, ohlc & bars

uPlot is a small, fast, and memory-efficient charting library designed for plotting time series, lines, areas, OHLC, and bar data using the HTML5 Canvas 2D context. It focuses intensely on performance and a minimal footprint, making it capable of rendering dense datasets smoothly with low resource utilization.

MaintainerDebian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed ByAndrew Lee (李健秋) <ajqlee@debian.org>
Sponsorajqlee@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/js-team/node-uplot.git (browse)
Trackerhttps://tracker.debian.org/pkg/node-uplot
Uploaded19 days ago
Supersedes1.6.32+ds2-1, 1.6.32+ds1-1

New Package Report

.changes◂
Architecturesource all
Distributionunstable
DateMon, 19 Oct 2026 14:57:29 +0200
Sourcenode-uplot
Version1.6.32+ds3-1
Changed-ByAndrew Lee (李健秋) <ajqlee@debian.org>
Changelog◂
node-uplot (1.6.32+ds3-1) unstable; urgency=medium
 .
   * debian/copyright: actually excluded demos.
   * debian/watch: repack +ds3.
   * New upstream version 1.6.32+ds3.
   * ebian/copyright: drop unmatched files under demos/.
.dsc◂
Priorityoptional
Componentmain
Package-Listnode-uplot deb javascript optional arch=all
Sectionjavascript
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: uplot
Upstream-Contact: Leon Sorokin <leeoniya@gmail.com>
Source: https://github.com/leeoniya/uPlot
Files-Excluded:
 demos
 bench
 dist/*.js
 dist/*.css

Files: *
Copyright: 2022 Leon Sorokin <leeoniya@gmail.com>
License: Expat

Files: src/paths/monotoneCubic.js
Copyright: Gion Kunz (Chartist.js)
License: Expat
Comment: adapted from the Chartist.js

Files: src/paths/catmullRomCentrip.js
Copyright: 2017 Nicholas Kyriakides & Unknown Authors
License: Expat
Comment: adapted from https://gist.github.com/nicholaswmin/c2661eb11cad5671d816 (MIT)

Files: debian/*
Copyright: 2026 Andrew Lee (李健秋) <ajqlee@debian.org>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 19 days ago.

Report◂

DFSG NEW review for node-uplot version 1.6.32+ds3-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The package is DFSG-compliant and debian/copyright is accurate. All upstream files carry the MIT/Expat licence (confirmed against the top-level LICENSE), with the two adopted sources — src/paths/monotoneCubic.js (from Chartist.js, MIT) and src/paths/catmullRomCentrip.js (from an MIT gist by Nicholas Kyriakides) — given their own stanzas. The dist/.js and dist/.css build products are excluded from the source and rebuilt at build time from the present src/ sources, so the preferred form for modification is shipped. The prescan's dfg-author-check found every holder named in debian/copyright.

Packaging

Packaging is of good quality and follows current Node.js Debian conventions: debhelper compat 14, dh-sequence-nodejs and dh-sequence-single-binary, build regeneration of dist via rollup+terser through debian/nodejs/build, an autopkgtest (pkg-js) that loads the built module, and Standards-Version 4.7.4 (current). No maintainer scripts or patches to review. No issue rises to the reporting threshold.

Issues

None.

Verified ◂
  • debian/copyright is in DEP-5 machine-readable format with a correct Format: URL, Files: * catch-all (MIT/Expat, complete text inline), and correct override stanzas for the two adopted sources; the top-level LICENSE matches the inline Expat text.
  • Every source file (src/.js, src/.css, src/paths/*, dist/uPlot.d.ts, docs/, README.md, rollup.config.js, package.json, .github/) is covered by the Files: * stanza.
  • The two adopted files carry their own notices: monotoneCubic.js references the Chartist.js implementation (MIT, Gion Kunz) and catmullRomCentrip.js references an MIT gist by Nicholas Kyriakides, matching their stanzas.
  • dist/uPlot.d.ts is a plain-text TypeScript declaration; the minified dist/.js and dist/.css are excluded from the source (Files-Excluded and debian/clean) and regenerated from src/ at build time by debian/nodejs/build (rollup -c), so the preferred form for modification is present.
  • demes and bench/ are absent from the tree as Files-Excluded declares, consistent with the changelog entry 'actually excluded demos'.
  • No non-free terms found anywhere (no non-commercial/no-modification/field-of-use wording). The README images (perf.png, uPlot.png, img/*.png) are author screenshots covered by the MIT catch-all.
  • The prescan's copyright-holder check scanned 27 files and reported every holder is named in debian/copyright; nothing from the prescan remains unconsumed.
  • debian/control: Build-Depends debhelper-compat (=14), dh-sequence-nodejs, dh-sequence-single-binary, rollup, node-rollup-plugin-terser; Architecture: all; Standards-Version 4.7.4 (current).
  • debian/source/format is 3.0 (quilt); no patches directory, so nothing to review there; no maintainer scripts.
  • debian/tests/pkg-js/test loads the built '../../dist/uPlot.cjs.js' under the pkg-js autopkgtest harness.
  • uscan found the packaged version as the newest upstream release (upstream 1.6.32, packaged 1.6.32+ds3).
Not confirmed ◂

None.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 19 days ago.

Review Information

accepted — allocated to babelouest 18 days ago, started 18 days ago, completed 18 days ago.

Final Comment

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
1.6.32+ds2-1 807cc1df… 2026-10-21 01:12 2026-10-21 01:12 babelouest accepted VIEW
1.6.32+ds1-1 26106888… 2026-10-21 01:12 2026-10-21 01:12 babelouest accepted VIEW

Back to Dashboard | View all reviews for this package