DFSG NEW Queue

DFSG, Licensing & New Packages Team

php-guzzlehttp-test-server 1.1.0-1

Package Information

Description${phpcomposer:description}

Testing helper for PHP HTTP clients. It’s a local Node.js HTTP server that records the requests sended by the clients.

MaintainerDebian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed ByDavid Prévot <taffit@debian.org>
Sponsortaffit@debian.org
Distributionexperimental
Architectureall
VCSgit: https://salsa.debian.org/php-team/pear/php-guzzlehttp-test-server.git (browse)
Trackerhttps://tracker.debian.org/pkg/php-guzzlehttp-test-server
Uploaded3 hours ago

New Package Report

.changes◂
Architecturesource all
Distributionexperimental
DateThu, 22 Oct 2026 11:25:02 +0200
Sourcephp-guzzlehttp-test-server
Version1.1.0-1
Changed-ByDavid Prévot <taffit@debian.org>
Changelog◂
php-guzzlehttp-test-server (1.1.0-1) experimental; urgency=medium
 .
   * Initial release (php-guzzlehttp-guzzle test dependency)
.dsc◂
Sectionphp
Priorityoptional
Componentmain
Package-Listphp-guzzlehttp-test-server deb php optional arch=all
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Guzzle test server
Upstream-Contact: Michael Dowling <mtdowling@gmail.com>
Source: https://github.com/guzzle/test-server

Files: *
Copyright: 2011, Michael Dowling <mtdowling@gmail.com>
License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
 THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for php-guzzlehttp-test-server version 1.1.0-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 1 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

All upstream files are MIT-licensed (Expat). The single LICENSE file grants MIT, server.js's C-style header refers to the LICENSE, README confirms MIT, and composer.json declares license MIT. There are no non-free terms, no minified/binary/generated blobs (the tree is pure PHP + unminified JS + markdown), no vendored third-party code and no Files-Excluded. debian/copyright is DEP-5 machine-readable, uses Expat with full text inline, and the prescan found every copyright holder named in it. The only inaccuracy is that the single Files: * catch-all also covers the Debian packaging files under debian/, attributing them to Michael Dowling's MIT copyright when they were written by the Debian maintainer.

Packaging

The packaging follows the Debian PHP team's standard dfsg-free pkg-php-tools conventions: Source 3.0 (quilt), debhelper compat 14 via Build-Depends, dh-sequence-phpcomposer to fill pkg-php-tools substvars, a build-time autoloader generated with phpab/phpabtpl (and cleaned in debian/clean), a nodejs runtime dependency for the JS server, and a DEP-3 patch that swaps the non-Debian node binary for nodejs. Architecture all / Multi-Arch foreign is correct for a PHP package. Standards-Version 4.7.4 matches the current 4.7.4.1 policy. Vcs-*, upstream metadata and gbp.conf are present. The patch is Debian-specific and correctly marked Forwarded: not-needed, since the node vs nodejs mismatch is a Debian quirk.

Issues

1. [minor] [licensing] debian/copyright has no debian/* stanza; the Files: * catch-all misattributes the packaging files

  • Files: debian/copyright
  • Basis: checked, in the package or with a reference tool
  • Evidence: The only stanza is Files: * with Copyright: 2011, Michael Dowling <mtdowling@gmail.com> and License: Expat. This catch-all also matches everything under debian/ (control, rules, changelog, patches, etc.), which were written by the Debian PHP team / David Prévot, not Michael Dowling.
  • Problem: DEP-5 catch-all Files: * matches the Debian packaging files too, so the machine-readable copyright claims the MIT-licensed, Michael Dowling-copyrighted work covers the maintainer's own packaging, which is inaccurate.
  • Fix: Add a separate Files: debian/* stanza with the Debian packaging copyright holders and their licence (e.g. GPL-2+ or Expat) before the Files: * catch-all.

Verified

  • All upstream files are MIT/Expat: LICENSE (MIT, Copyright (c) 2011 Michael Dowling), src/server.js header @license See the LICENSE file, README License section, composer.json license: MIT.
  • No Files-Excluded; every file in the tree is covered by the single Files: * stanza.
  • The tree contains no minified, binary, or generated-for-distribution files; src/server.js is unminified JS and src/autoload.php is generated only at build time by phpab (listed in debian/clean).
  • No vendored third-party code, no node_modules, no fonts, images or sounds.
  • Prescan (dfsg-author-check, 11 files) found every copyright holder already named in debian/copyright.
  • Source format 3.0 (quilt); single DEP-3 patch replaces node with nodejs to match the Debian binary name (Forwarded: not-needed), the only caller being the proc_open line in src/Server.php.
  • debian/control: Build-Depends debhelper-compat (=14) and dh-sequence-phpcomposer add relation substvars automatically; Depends nodejs + pkg-php-tools substvars; Architecture all / Multi-Arch foreign appropriate for a PHP package.
  • override_dh_auto_build uses phpabtpl/phpab to emit src/autoload.php from src, and debian/install ships src/* to usr/share/php/GuzzleHttp/Server plus the autoloader registration file.
  • Standards-Version 4.7.4 matches current Policy 4.7.4.1 (first two components identical, so not an issue).
  • No maintainer scripts; Vcs-Git/Vcs-Browser, upstream metadata, gbp.conf, changelog initial release to experimental are all sane.
  • uscan found the packaged version as the newest upstream release (upstream 1.1.0, packaged 1.1.0).

Not confirmed

None.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package