php-http-discovery 1.20.0-1

Package Information

Description	${phpcomposer:description} This library provides auto-discovery and auto-installation of well-known PSR-17, PSR-18 and HTTPlug implementations.
Maintainer	Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed By	Laszlo Boszormenyi (GCS) <gcs@debian.org>
Sponsor	gcs@debian.org
Distribution	experimental
Architecture	all
VCS	git: https://salsa.debian.org/php-team/pear/php-http-discovery.git (browse)
Closes	#1150534
Tracker	https://tracker.debian.org/pkg/php-http-discovery
Uploaded	4 hours ago

New Package Report

.changes◂

Changed-By	Laszlo Boszormenyi (GCS) <gcs@debian.org>
Architecture	source all
Distribution	experimental
Date	Sun, 13 Sep 2026 19:04:21 +0200
Source	php-http-discovery
Version	1.20.0-1

Changelog◂

php-http-discovery (1.20.0-1) experimental; urgency=medium
 .
   * Initial release (closes: #1150534).

.dsc◂

Section	php
Priority	optional
Component	main
Package-List	php-http-discovery deb php optional arch=all

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: HTTPlug Discovery
Upstream-Contact: 2015-2016 PHP HTTP Team <team@php-http.org>
Source: https://github.com/php-http/discovery

Files: *
Copyright:
 2004-2023 Fabien Potencier <fabien@symfony.com>,
 2015 Michael Dowling <mtdowling@gmail.com>,
 2015 Márk Sági-Kazár <mark.sagikazar@gmail.com>,
 2015 Graham Campbell <hello@gjcampbell.co.uk>,
 2015-2016 PHP HTTP Team <team@php-http.org>,
 2016 Tobias Schultze <webmaster@tubo-world.de>,
 2016 George Mponos <gmponos@gmail.com>,
 2016-2018 Tobias Nyholm <tobias.nyholm@gmail.com>,
 Nicolas Grekas <p@tchwork.com>
License: MIT
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 "Software"), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 .
 The above copyright notice and this permission notice shall be included
 in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
 KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
 WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
 LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Files: debian/*
Copyright: 2026 Laszlo Boszormenyi (GCS) <gcs@debian.org>
License: GPL-3+
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation, either version 3 of the License, or
 (at your option) any later version.
 .
 This package is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 GNU General Public License for more details.
 .
 You should have received a copy of the GNU General Public License
 along with this program. If not, see <https://www.gnu.org/licenses/>.
 .
 On Debian systems, the complete text of the GNU General Public License
 version 3 can be found in `/usr/share/common-licenses/GPL-3'.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 3 hours ago.

Report◂

DFSG NEW review for php-http-discovery version 1.20.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

All upstream files are MIT-licensed. The root LICENSE is the MIT licence; a grep across src/ for copyright/licence headers found only Psr17Factory.php's header, whose holders (Fabien Potencier, Michael Dowling, Márk Sági-Kazár, Graham Campbell, Tobias Schultze, George Mponos, Tobias Nyholm) are exactly the ones in the Files: * stanza. The Composer Plugin.php carries only an @author Nicolas Grekas, also listed. The pre-scan's author check confirms every holder found is named in debian/copyright. debian/copyright is DEP-5 machine-readable, has a Files: * catch-all with the full MIT text inline, and a debian/* stanza for the packaging under GPL-3+ (referring to /usr/share/common-licenses/GPL-3). No non-free terms, no embedded/vendored third-party code, no binary/minified/form-of-modification problems, no files without licence. Licensing is DFSG-compliant and debian/copyright is accurate and complete.

Packaging

Clean, standard pkg-php-tools package. Build-Depends: debhelper-compat (= 13), dh-sequence-phpcomposer (provided by pkg-php-tools 1.49), phpab (present in the archive) — all valid. debian/rules builds via phpab into src/autoload.php, which debian/clean removes; the install file and debian/autoloaders map src/* and Http/Discovery/autoload.php consistently. The single patch (remove-composer-plugin-api) has proper DEP-3 headers and is Forwarded: not-needed. The remove-composer-plugin-api require is cosmetic in Debian since the Composer plugin class is dead code there and upstream excludes it from the classmap. Architecture: all with Multi-Arch: foreign is right for PHP. dh-phpcomposer substvars (${phpcomposer:Debian-require}, etc.) and Description substvar are used as intended, with ${misc:Depends} present. Standards-Version 4.7.4 matches current Policy. Vcs-* points at the php-team salsa repo. No policy violations or upgrade concerns.

Issues

None.

Verified

Root LICENSE is the standard MIT text; licence short name and inline text in debian/copyright match.
grep of src/ found licence/author headers only in Psr17Factory.php; all listed holders appear in the Files: * stanza.
Pre-scan author check: every holder found is named in debian/copyright.
No vendor/ embedded third-party code; no binary, minified, or generated-code files except src/autoload.php which rules generates from src/ and debian/clean removes.
patches/series contains one patch with valid DEP-3 headers (From/Date/Subject/Forwarded: not-needed).
Build-Depends resolvable: dh-sequence-phpcomposer provided by pkg-php-tools 1.49, phpab present in archive.
docs: gitignore:false glob of the whole tree (excluding .pc/ and debian/) returned only composer.json, .php-cs-fixer.php, CHANGELOG.md, LICENSE, README.md and src/**; all covered by the MIT Files: * stanza.
uscan found the packaged version as the newest upstream release (upstream 1.20.0, packaged 1.20.0).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (GPL-3).

Not confirmed

None.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 2 hours ago.

Back to Dashboard | View all reviews for this package