php-doctrine-orm-plugin-second-level-cache 1.0.2-1

Package Information

Description	ORM Plugin Second Level Cache - Doctrine component ${phpcomposer:description}. The Doctrine Project provides several libraries primarily focused on database storage and object mapping.
Maintainer	Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed By	David Prévot <taffit@debian.org>
Sponsor	taffit@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/php-team/pear/php-doctrine-orm-plugin-second-level-cache.git (browse)
Tracker	https://tracker.debian.org/pkg/php-doctrine-orm-plugin-second-level-cache
Uploaded	3 hours ago

New Package Report

.changes◂

Source	php-doctrine-orm-plugin-second-level-cache
Version	1.0.2-1
Changed-By	David Prévot <taffit@debian.org>
Architecture	source all
Distribution	unstable
Date	Sun, 15 Nov 2026 09:27:49 +0100

Changelog◂

php-doctrine-orm-plugin-second-level-cache (1.0.2-1) unstable; urgency=low
 .
   * Initial release (New php-doctrine-orm dependency)

.dsc◂

Priority	optional
Component	main
Package-List	php-doctrine-orm-plugin-second-level-cache deb php optional arch=all
Section	php

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: ORM Plugin Second Level Cache
Source: https://github.com/doctrine/orm-plugin-second-level-cache
Upstream-Contact: Benjamin Eberlei <kontakt@beberlei.de>

Files: *
Copyright: 2026, Doctrine Project
License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is furnished
 to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for php-doctrine-orm-plugin-second-level-cache version 1.0.2-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

Upstream is Expat-licensed and there is no other licence in the tree: LICENSE carries the full MIT/Expat text under Copyright (c) Doctrine Project, composer.json declares "license": "MIT" (the same licence under its other name), and no file carries a GNU, Apache, non-commercial or no-modification statement. All five upstream files fall under the single Files: * stanza, whose License: Expat paragraph reproduces the full text (Expat is not in /usr/share/common-licenses), and the composer author Benjamin Eberlei is named as Upstream-Contact; the prescan found no holder that debian/copyright omits. The one gap is that no Files: debian/* stanza names the packaging's own copyright holder, so Files: * attributes the Debian packaging to the Doctrine Project; Policy 2.3 does not require a notice for those files because they are not compiled into the binary, so this is minor, not a DFSG problem.

Packaging

Ordinary, well-formed pkg-php-pear package: 3.0 (quilt) with no patches, debhelper-compat (= 14) with dh-sequence-phpcomposer (pkg-php-tools 1.50), and phpab in Build-Depends because override_dh_auto_build runs it unconditionally to generate src/autoload.php, which debian/install then ships at /usr/share/php/Doctrine/ORM/Cache/ and debian/autoloaders/ registers. debian/clean, debian/docs and the install lines all match the tree, Standards-Version: 4.7.4 is current against Policy 4.7.4.1, there are no maintainer scripts or patches, and there is no test suite or autopkgtest to run. The only open point is what the empty composer require makes the binary depend on.

Issues

minor licensing 1. No Files: debian/* stanza: the packaging's holder, David Prévot, is not named and Files: * attributes debian/ to the Doctrine Project ◂

Files: debian/copyright:6-8, debian/changelog:5, debian/control:5
Basis: checked, in the package or with a reference tool
Evidence: Files: * / Copyright: 2026, Doctrine Project covers debian/ too; the packaging's author is evident only from debian/changelog -- David Prévot <taffit@debian.org> and debian/control Uploaders: David Prévot <taffit@debian.org>.
Problem: Files: * is the catch-all, so it claims the Doctrine Project holds copyright on debian/rules, debian/control, debian/changelog, debian/copyright and the rest, which is not so. Policy 2.3 requires a file's copyright notice in debian/copyright only when the licence requires it, the file is shipped in a binary package and no plain-text notice travels with it: debian/* are source-package build files that are not installed (the one file that is, debian/autoloaders/php-doctrine-orm-plugin-second-level-cache, is a one-line generated data file installed verbatim), so Policy does not require the stanza, but a complete debian/copyright names it and the file as it stands misstates the holder.
Fix: Add a Files: debian/* paragraph after Files: * (later stanzas override earlier ones, so it must come second) with Copyright: 2026, David Prévot <taffit@debian.org> (or the DPMT line the packager prefers) and License: Expat, the licence already applied to debian/, or the licence the packager actually intends for the packaging.

Verified ◂

Read the whole tree: five upstream files (.gitignore, LICENSE, README.md, composer.json, src/SecondLevelCachePlugin.php) and every file under debian/; .pc/ records no applied patches and there is no debian/patches.
Grep for Copyright, (C), ©, SPDX-License-Identifier, licen[cs]e, GNU, Apache, Mozilla, public domain, All rights reserved, Permission is hereby granted found licence text only in LICENSE and composer.json; README.md, .gitignore and the PHP source carry no notices of their own and are covered by Files: *.
LICENSE (Copyright (c) Doctrine Project, full Expat text) and composer.json "license": "MIT" agree with Files: * License: Expat; the Expat text is reproduced in full in the stanza, as it must be since it is not in /usr/share/common-licenses. The prescan's holder check (4 files) found every holder named; the composer author Benjamin Eberlei appears as Upstream-Contact.
src/SecondLevelCachePlugin.php is a five-line file declaring an empty class SecondLevelCachePlugin; there are no built files, minified code, PDFs, images, fonts or vendored third-party copies anywhere in the tree, so nothing is missing its preferred form for modification.
phpab --output src/autoload.php src in override_dh_auto_build generates the only file that is not upstream's; debian/install ships src/* to /usr/share/php/Doctrine/ORM/Cache and debian/autoloaders/php-doctrine-orm-plugin-second-level-cache (doctrine orm-plugin-second-level-cache Doctrine/ORM/Cache/autoload.php) registers that autoloader at the matching relative path; debian/clean removes the generated file.
debian/clean also lists debian/autoload.php.tpl, which is not in the package; /usr/bin/dh_clean reads debian/clean with a silently-ignoring glob handler and removes entries with rm -f, so the missing path is harmless.
debian/docs (*.md) and debian/install (src/*) are expanded as globs (filearray in dh_installdocs and dh_install), so README.md and the generated src/autoload.php are installed as intended.
debhelper-compat (= 14) plus dh-sequence-phpcomposer (provided by pkg-php-tools 1.50) runs dh_phpcomposer for the ${phpcomposer:*} substvars; phpab is a genuine Build-Depends used outside the tests; there is no <!nocheck> dependency and no test suite, so the nocheck build profile loses nothing.
Standards-Version: 4.7.4 matches Policy 4.7.4.1 in its first two components and is not an issue; debian/control uses Architecture: all with Multi-Arch: foreign, as the other DPMT Doctrine packages do; no maintainer scripts, .maintscript or debian/tests exist, and debian/upstream/metadata and debian/gbp.conf are well formed.
uscan found the packaged version as the newest upstream release (upstream 1.0.2, packaged 1.0.2).

Not confirmed ◂

The binary's runtime dependencies come only from ${phpcomposer:Debian-require}, which dh_phpcomposer(1) generates from composer.json's require; this composer.json has no require, require-dev, suggest or conflict section at all. The man page does not say whether an unconditional php-common is added, and pkg-php-tools' README.Composer is not installed on the reviewing system, so I could not tell whether the built package depends on nothing, not even a PHP interpreter, unlike sibling packages such as php-doctrine-annotations (Depends: php-common). The generated Depends field of the binary would show it.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 2 hours ago.

Back to Dashboard | View all reviews for this package