DFSG NEW Queue

DFSG, Licensing & New Packages Team

python-imagecodecs 2026.10.10+ds1-2

Package Information

DescriptionImage transformation, compression/decompression codecs

Decode and/or encode functions are implemented for many compressors, image formats, filters, shufflers, checksummers and so on.

Due to some of the dependencies not being available in Debian, only a small subset of these are enabled in the Debian package (those required by a depending package). Others may be enabled upon request.

MaintainerDebian PaN Maintainers <debian-pan-maintainers@alioth-lists.debian.net>
Changed ByRoland Mas <lolando@debian.org>
Sponsorlolando@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/python-team/packages/python-imagecodecs.git (browse)
Trackerhttps://tracker.debian.org/pkg/python-imagecodecs
Uploaded1 hour ago

New Package Report

.changes◂
Changed-ByRoland Mas <lolando@debian.org>
Architecturesource amd64
Distributionunstable
DateWed, 04 Nov 2026 21:44:29 +0100
Sourcepython-imagecodecs
Version2026.10.10+ds1-2
Changelog◂
python-imagecodecs (2026.10.10+ds1-2) unstable; urgency=medium
 .
   * Update debian/copyright.
   * Disable building some (many) of the modules.
 .
 python-imagecodecs (2026.10.10+ds1-1) unstable; urgency=medium
 .
   * Initial packaging.
.dsc◂
Sectionpython
Priorityoptional
Componentmain
Package-Listpython3-imagecodecs deb python optional arch=any
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: imagecodecs
Upstream-Contact: Christoph Gohlke <cgohlke@cgohlke.com>
Source: https://github.com/cgohlke/imagecodecs
Files-Excluded:
 3rdparty/liblzf
 3rdparty/libspng

Files: *
Copyright: Copyright (c) 2008-2026, Christoph Gohlke
License: BSD-3-Clause

Files: 3rdparty/bcdec/*
Copyright: 2022 Sergii Kudlai
License: Expat or Unlicense

Files: 3rdparty/ccitt/*
Copyright: Christoph Gohlke
License: 0BSD

Files: 3rdparty/liblj92/*
Copyright: Andrew Baldwin 2014
License: Expat

Files: 3rdparty/wic/*
Copyright: Christoph Gohlke
License: 0BSD

Files: 3rdparty/openjpeg/*
Copyright:
 2002-2014, Universite catholique de Louvain (UCL), Belgium
 2002-2014, Professor Benoit Macq
 2003-2014, Antonin Descampe
 2003-2009, Francois-Olivier Devaux
 2005, Herve Drolon, FreeImage Team
 2002-2003, Yannick Verschueren
 2001-2003, David Janssens
 2011-2012, Centre National d'Etudes Spatiales (CNES), France
 2012, CS Systemes d'Information, France
License: BSD-2-Clause

Files: 3rdparty/pixarlog/*
Copyright:
 1996-1997 Sam Leffler
 1996 Pixar
 Christoph Gohlke
License: libtiff
Comment: The file contents mention HPND-sell-variant but do not include it

Files: 3rdparty/bitshuffle/*
Copyright: 2014 Kiyoshi Masui <kiyo@physics.ubc.ca>
License: Expat

Files: 3rdparty/qoi/*
Copyright: 2022 Dominic Szablewski
License: Expat

Files: 3rdparty/cfitsio/*
Copyright: U.S. Government as represented by the Administrator of the National Aeronautics and Space Administration
License: CFITSIO
 Copyright (Unpublished--all rights reserved under the copyright laws of
 the United States), U.S. Government as represented by the Administrator
 of the National Aeronautics and Space Administration.  No copyright is
 claimed in the United States under Title 17, U.S. Code.
 .
 Permission to freely use, copy, modify, and distribute this software
 and its documentation without fee is hereby granted, provided that this
 copyright notice and disclaimer of warranty appears in all copies.
 .
 DISCLAIMER:
 .
 THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND,
 EITHER EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO,
 ANY WARRANTY THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY
 IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
 PURPOSE, AND FREEDOM FROM INFRINGEMENT, AND ANY WARRANTY THAT THE
 DOCUMENTATION WILL CONFORM TO THE SOFTWARE, OR ANY WARRANTY THAT THE
 SOFTWARE WILL BE ERROR FREE.  IN NO EVENT SHALL NASA BE LIABLE FOR ANY
 DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL OR
 CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM, OR IN ANY WAY
 CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY,
 CONTRACT, TORT , OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY
 PERSONS OR PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED
 FROM, OR AROSE OUT OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR
 SERVICES PROVIDED HEREUNDER.

Files: 3rdparty/hdf5/*
Copyright:
 2006-2012 by The HDF Group.
 1998-2006 by the Board of Trustees of the University of Illinois.
License:
 All rights reserved.
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted for any purpose (including commercial purposes)
 provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions, and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions, and the following disclaimer in the documentation
    and/or materials provided with the distribution.
 .
 3. In addition, redistributions of modified forms of the source or binary
    code must carry prominent notices stating that the original code was
    changed and the date of the change.
 .
 4. All publications or advertising materials mentioning features or use of
    this software are asked, but not required, to acknowledge that it was
    developed by The HDF Group and by the National Center for Supercomputing
    Applications at the University of Illinois at Urbana-Champaign and
    credit the contributors.
 .
 5. Neither the name of The HDF Group, the name of the University, nor the
    name of any Contributor may be used to endorse or promote products derived
    from this software without specific prior written permission from
    The HDF Group, the University, or the Contributor, respectively.
 .
 DISCLAIMER:
 THIS SOFTWARE IS PROVIDED BY THE HDF GROUP AND THE CONTRIBUTORS
 "AS IS" WITH NO WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED.  In no
 event shall The HDF Group or the Contributors be liable for any damages
 suffered by the users arising out of the use of this software, even if
 advised of the possibility of such damage.

Files: 3rdparty/jpegsof3/*
Copyright: 2014-2016 Chris Rorden
License: BSD-3-Clause

Files: 3rdparty/netcdf-c/*
Copyright: 2018 Unidata
License: BSD-3-Clause

Files: 3rdparty/postgresql/*
Copyright:
 1994, The Regents of the University of California
 1996-2021, PostgreSQL Global Development Group
License: PostgreSQL
 Permission to use, copy, modify, and distribute this software and its
 documentation for any purpose, without fee, and without a written agreement
 is hereby granted, provided that the above copyright notice and this
 paragraph and the following two paragraphs appear in all copies.
 .
 IN NO EVENT SHALL THE UNIVERSITY OF CALIFORNIA BE LIABLE TO ANY PARTY FOR
 DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, INCLUDING
 LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE AND ITS
 DOCUMENTATION, EVEN IF THE UNIVERSITY OF CALIFORNIA HAS BEEN ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.
 .
 THE UNIVERSITY OF CALIFORNIA SPECIFICALLY DISCLAIMS ANY WARRANTIES,
 INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
 AND FITNESS FOR A PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED HEREUNDER IS
 ON AN "AS IS" BASIS, AND THE UNIVERSITY OF CALIFORNIA HAS NO OBLIGATIONS TO
 PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.

Files: imagecodecs/licenses/*
Copyright: see the relevant files in 3rdparty/
License:
 These are the license texts of the respective third-party
 libraries. Each one is either outside the scope of copyright, or
 governed by itself.

Files: tests/data/libaec/*
Copyright:
 Mathis Rosenhauer, Moritz Hanke, Joerg Behrens, Deutsches Klimarechenzentrum GmbH
 Luis Kornblueh, Max-Planck-Institut fuer Meteorologie
License: BSD-2-Clause

Files: tests/data/lerc/*
Copyright:
License: Apache-2.0
 On Debian systems

Files: debian/*
Copyright: 2026 Roland Mas <lolando@debian.org>
License: BSD-3-Clause

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice, this
    list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.
 .
 3. Neither the name of the copyright holder nor the names of its
    contributors may be used to endorse or promote products derived from
    this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 "Software"), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 .
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: Unlicense
 This is free and unencumbered software released into the public
 domain.
 .
 Anyone is free to copy, modify, publish, use, compile, sell, or
 distribute this software, either in source code form or as a compiled
 binary, for any purpose, commercial or non-commercial, and by any
 means.
 .
 In jurisdictions that recognize copyright laws, the author or authors
 of this software dedicate any and all copyright interest in the
 software to the public domain. We make this dedication for the
 benefit of the public at large and to the detriment of our heirs and
 successors. We intend this dedication to be an overt act of
 relinquishment in perpetuity of all present and future rights to this
 software under copyright law.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT.  IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

License: 0BSD
 Permission to use, copy, modify, and/or distribute this software for
 any purpose with or without fee is hereby granted.
 .
 THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL
 WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
 WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
 AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
 DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
 PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
 TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THIS SOFTWARE.

License: libtiff
 Permission to use, copy, modify, distribute, and sell this software
 and its documentation for any purpose is hereby granted without fee,
 provided that (i) the above copyright notices and this permission
 notice appear in all copies of the software and related
 documentation, and (ii) the names of Pixar, Sam Leffler and Silicon
 Graphics may not be used in any advertising or publicity relating to
 the software without the specific, prior written permission of Pixar,
 Sam Leffler and Silicon Graphics.
 .
 THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND,
 EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY
 WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
 .
 IN NO EVENT SHALL PIXAR, SAM LEFFLER OR SILICON GRAPHICS BE LIABLE
 FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY
 KIND, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
 PROFITS, WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON
 ANY THEORY OF LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE
 OR PERFORMANCE OF THIS SOFTWARE.

License: BSD-2-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 .
 1. Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS `AS IS'
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 1 blocker, 2 important, 5 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 0 hours ago.

Report◂

DFSG NEW review for python-imagecodecs version 2026.10.10+ds1-2

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: No
  • Packaging is of good quality: Yes
  • Issues: 1 blocker, 2 important, 5 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: 118 found (61 not listed by the scan, so not checked)

Licensing

debian/copyright is in DEP-5 format and gets most of the tree right: the main codecs and 3rdparty components carry permissive licences (BSD-3-Clause, Expat, 0BSD, BSD-2-Clause, Unlicense, HDF5, PostgreSQL, CFITSIO, HPND-sell-variant, Apache-2.0), all compatible with each other, and their texts are reproduced. One vendored component, 3rdparty/rgbe, carries no licence grant at all and is nevertheless covered by Files: * as Christoph Gohlke's BSD-3-Clause code; it is compiled into the shipped module. Two stanzas also omit a copyright holder that the files themselves name, and one test-data stanza has an empty Copyright field and a truncated licence text.

Packaging

The packaging is conventional and would build: 3.0 (quilt), debhelper compat 14 with dh and pybuild, a clean single binary package, autopkgtest-pkg-pybuild, Standards-Version 4.7.4 against Policy 4.7.4.1, and a sensible changelog. The remaining defects are minor: a long list of Build-Depends for extensions the package deliberately does not build, one of which (libzlcore-dev) is a different library altogether, and two patches that do more than their subject says, one of them silently skipping upstream tests and the other deleting upstream's Windows build customization.

Issues

blocker licensing 1. 3rdparty/rgbe has no licence grant, but Files: * licenses it BSD-3-Clause as Christoph Gohlke's code ◂
  • Files: 3rdparty/rgbe/rgbe.c:1-27, 3rdparty/rgbe/rgbe.h:3-5, debian/copyright:11-14, setup.py:265-267, setup.py:375
  • Basis: checked, in the package or with a reference tool
  • Evidence: /* THIS CODE CARRIES NO GUARANTEE OF USABILITY OR FITNESS FOR ANY PURPOSE. ... IT IS STRICTLY USE AT YOUR OWN RISK. */, written by Bruce Walter (bjw@graphics.cornell.edu) 5/26/95 based on code written by Greg Ward, and only feel free to modify it to suit your needs. No copyright notice and no permission to copy or distribute appears anywhere in rgbe.c, rgbe.h or rgbe.txt; no stanza other than Files: * (Copyright (c) 2008-2026, Christoph Gohlke; License: BSD-3-Clause) matches the directory, and imagecodecs/licenses/ has no rgbe entry.
  • Problem: A warranty disclaimer is not a licence: nothing in these files grants permission to copy, modify or distribute the code, so shipping it, let alone modified, is not authorised (Policy 2.2.1 and the DFSG social contract require a free licence for every file). debian/copyright is also inaccurate, attributing the file to Gohlke under BSD-3-Clause. The code is not dormant: the rgbe extension is in EXTENSIONS_DEBIAN and is built from 3rdparty/rgbe/rgbe.c, so it is in the shipped python3-imagecodecs.
  • Fix: Ask upstream to establish and record the licence of the original Walter/Ward code and add it to debian/copyright; if no grant can be obtained, stop building the rgbe extension (drop it from EXTENSIONS_DEBIAN) and remove the files with the +ds repack, reporting it upstream. Do not record a licence for them in debian/copyright that the files do not grant.
important licensing 2. Files: 3rdparty/bitshuffle/* does not name the European Synchrotron Radiation Facility ◂
  • Files: debian/copyright:44-46, 3rdparty/bitshuffle/hdf5_dl.c:1-5
  • Basis: checked, in the package or with a reference tool
  • Evidence: hdf5_dl.c: # Copyright (c) 2019 European Synchrotron Radiation Facility / # Permission is hereby granted, free of charge... (Expat); the stanza says only Copyright: 2014 Kiyoshi Masui <kiyo@physics.ubc.ca>, License: Expat.
  • Problem: The stanza is the one that applies to 3rdparty/bitshuffle/* and it omits a holder whose notice is in the file, so debian/copyright does not describe the copyright of that file (Debian Policy 12.5, copyright-format 5.2).
  • Fix: Add 2019 European Synchrotron Radiation Facility to the Copyright field of the 3rdparty/bitshuffle/* stanza (licence stays Expat).
important licensing 3. Files: 3rdparty/netcdf-c/* does not name the University Corporation for Atmospheric Research ◂
  • Files: debian/copyright:120-122, 3rdparty/netcdf-c/nc4var.c:1, 3rdparty/netcdf-c/COPYRIGHT:1
  • Basis: checked, in the package or with a reference tool
  • Evidence: nc4var.c: /* Copyright 2003-2018, University Corporation for Atmospheric / Research ...; the stanza says only Copyright: 2018 Unidata.
  • Problem: Unidata is a project of UCAR, not the copyright holder named in the file; the holder named in the file is missing from debian/copyright, so the file's copyright is misdescribed (Policy 12.5, copyright-format 5.2).
  • Fix: Extend the Copyright field to name 2003-2018 University Corporation for Atmospheric Research (and keep Unidata if desired), licence unchanged (BSD-3-Clause).
minor licensing 4. Files: 3rdparty/jpegsof3/* leaves out Christoph Gohlke's copyright on the modified files ◂
  • Files: debian/copyright:114-116, 3rdparty/jpegsof3/jpegsof3.cpp:63, 3rdparty/jpegsof3/jpegsof3.cpp:77, 3rdparty/jpegsof3/jpegsof3.h:12
  • Basis: checked, in the package or with a reference tool
  • Evidence: jpegsof3.cpp: Copyright(c) 2014 - 2016 Chris Rorden. All rights reserved. followed by The changes are released under the BSD 3-Clause License: Copyright (c) 2018-2026, Christoph Gohlke; the stanza lists only 2014-2016 Chris Rorden.
  • Problem: Later stanzas override earlier ones, so this stanza replaces the Files: * attribution for these files and drops the holder of the extensive Gohlke changes recorded in the file. debian/copyright therefore describes the file as having one holder when it has two (Policy 12.5). The neighbouring 3rdparty/pixarlog/* stanza does list Christoph Gohlke, so this is an omission, not a policy choice.
  • Fix: Add 2018-2026 Christoph Gohlke to the Copyright field of the 3rdparty/jpegsof3/* stanza.
minor licensing 5. Files: tests/data/lerc/* has an empty Copyright field and only a fragment of the Apache-2.0 licence text ◂
  • Files: debian/copyright:139-143, tests/data/lerc/readme.txt

  • Basis: checked, in the package or with a reference tool

  • Evidence:

    Files: tests/data/lerc/*
    Copyright:
    License: Apache-2.0
     On Debian systems
    

    while tests/data/lerc/readme.txt says https://github.com/Esri/lerc/tree/master/testData / Apache License - 2.0.

  • Problem: Copyright is a required field and is empty here, so the holder (Esri, whose testData this is) is not named (copyright-format 5.2, Policy 12.5). The License field has trailing lines but they are neither the licence text nor a pointer to a file under /usr/share/common-licenses, which copyright-format 6.7 requires once any text follows the short name; Apache-2.0 also has no stand-alone License paragraph to explain it (6.7).

  • Fix: Give the stanza a real Copyright field naming Esri, and either drop the trailing text so the Apache-2.0 short name stands alone, or replace it with a proper pointer to /usr/share/common-licenses/Apache-2.0.

minor packaging 6. Build-Depends carries 21 entries for extensions the patch disables, including libzlcore-dev, which is fbreader's ZLibrary ◂
  • Files: debian/control:14-52, debian/patches/0003-Select-a-set-of-extensions-to-build.patch:7-80
  • Basis: checked, in the package or with a reference tool
  • Evidence: EXTENSIONS_DEBIAN comments out aec, avif, blosc, blosc2, bz2, deflate, exr, gif, heif, jpeg2k, meshopt, png, spng, ultrahdr, wavpack, zfp, zopfli, zstd, while Build-Depends still lists libaec-dev, libavif-dev, libblosc-dev, libblosc2-dev, libbz2-dev, libdeflate-dev, libgif-dev, libheif-dev, libmeshoptimizer-dev, libopenexr-dev, libopenjp2-7-dev, libpng-dev, libspng-dev, libuhdr-dev, libwavpack-dev, libzfp-dev, libzopfli-dev, libzstd-dev, libzlcore-dev, dbus and dbus-daemon. apt-cache show libzlcore-dev gives Source: fbreader, ZLibrary cross-platform development library; grep dbus tests/ finds nothing.
  • Problem: Eighteen of these are development packages nothing is compiled against, and libzlcore-dev is not a compression library at all but the GUI toolkit library from fbreader, so every build pulls in an unrelated dependency chain for nothing; the two dbus entries are likewise unused by the test suite. This is dependency bloat for builders and for the bootstrap, and the fbreader entry suggests a lookup mistake rather than an intent.
  • Fix: Drop the Build-Depends of the extensions commented out in EXTENSIONS_DEBIAN, replace or remove libzlcore-dev, and drop dbus/dbus-daemon unless a test needs them.
minor packaging 7. Patch 0002 skips upstream jpeg8+rgba tests without saying why and without forwarding it ◂
  • Files: debian/patches/0002-Skip-some-jpeg8-alpha-tests.patch:1-25

  • Basis: checked, in the package or with a reference tool

  • Evidence:

    +            if itype == 'rgba':
    +                pytest.skip('skipping jpeg8+rgba')
    

    and the same for itype == 'rgba' and dtype == 'uint8'; the patch has no Forwarded, Bug or explanation beyond the subject Skip some jpeg8+alpha tests.

  • Problem: The patch removes real coverage of a codec that the package ships, so a regression in jpeg8 alpha handling can no longer be caught; a reader cannot tell whether this is an upstream bug, a difference in Debian's libjpeg-turbo, or a workaround for the build options. Patches should be minimal, documented and forwarded (Policy 4.3, DEP-3).

  • Fix: Investigate the failure, record the cause in the patch description or a Bug: header, mark it Forwarded: not-needed with the reason if Debian-specific, and send it upstream; otherwise drop it.

minor packaging 8. Patches 0001/0003 delete customize_build_cgohlke, still referenced at setup.py:1069, and merge its body into customize_build_default ◂
  • Files: debian/patches/0001-Use-system-libs.patch:1-56, debian/patches/0003-Select-a-set-of-extensions-to-build.patch:80-200, setup.py:1067-1079, setup.py:441-460
  • Basis: checked, in the package or with a reference tool
  • Evidence: The hunk @@ -369,49 +447,9 @@ removes def customize_build_cgohlke(...), leaving its remaining body (static library names for aec, webp, tiff, jpegxl and the Windows/MSVC if 'ARM64' in sys.version branch) appended to customize_build_default, while setup.py:1069 still does customize_build = customize_build_cgohlke.
  • Problem: The patches go far beyond their subjects (Use system libs, Select a set of extensions to build): they change the behaviour of the non-Debian default build, remove upstream's Windows build customization, and leave a NameError on that code path. That makes the patches hard to review and impossible to forward as they stand, and future upstream merges of that region will conflict.
  • Fix: Confine the patches to the library substitutions and the extension selection; keep customize_build_cgohlke in place, or drop the Windows branch and its call site together as a separately documented, forwarded patch.
Verified ◂
  • debian/copyright is DEP-5 with the correct Format URL; every stand-alone licence it uses is defined there, and the permissive licences not in /usr/share/common-licenses (HDF5, PostgreSQL, CFITSIO, libtiff/HPND-sell-variant, 0BSD, Expat, BSD-2-Clause, Unlicense) have their full text in the file.
  • Files-Excluded names 3rdparty/liblzf and 3rdparty/libspng; neither is in the tree, Debian ships liblzf-dev and libspng-dev, and patch 0001 links the system versions, so the +ds repack is consistent with the packaging.
  • All the binary and compressed files in the prescan are codec fixtures under tests/data, not built code. Compressed ones: tests/data/zstd_stream.bin (zstd stream used to test the zstd stream decoder) and tests/data/lerc/zstd.lerc2 (a zstd-compressed LERC2 image). Unrecognised binaries I enumerate: tests/data/384x256.hdr and tests/data/384x256.rgbe.bin (the same Radiance HDR image in HDR and raw RGBE form), tests/data/384x256.rgb9_e5.bin (packed RGB9_E5 float pixels), tests/data/bytes.bin, tests/data/bytes.bitorder.bin, tests/data/bytes.lzw_horizontal.bin, tests/data/gray.u1.br (brotli-compressed 1-bit grey), tests/data/hcomp_i16_32x31_scale0.bin, tests/data/hcomp_i32_32x31_scale0.bin and tests/data/hcomp_i32_32x31_scale4.bin (cfitsio HCOMPRESS fixtures), tests/data/image_noeoi.bin and tests/data/image_noeoi.lzw.bin (truncated-JPEG corpus), tests/data/corrupt.lzw.bin, tests/data/fixedpoint.jxr, tests/data/int8_4bit.j2k, plus tests/data/libaec/121B2TestData/AllOptions/.rz and .dat, tests/data/lerc/.lerc1/.lerc2 and tests/data/tiff/*.tif. No archives, compiled objects, minified code or generated sources were found anywhere else in the tree.
  • The 45 holders the author check reports missing are almost all holders named inside imagecodecs/licenses/LICENSE-* and PATENTS-rav1e, which are verbatim copies of third-party licence texts, not shipped code; the Files: imagecodecs/licenses/* stanza covers them. That includes imagecodecs/licenses/LICENSE-bcdec and LICENSE-jpg_0xc3, and the IJG/libjpeg/mozjpeg/libaivf texts named below. The substantive omissions are the bitshuffle, netcdf-c and jpegsof3 issues above.
  • Wording the scan flagged as rare or restrictive is not. 3rdparty/bcdec/LICENSE and 3rdparty/bcdec/bcdec.h carry the Unlicense, whose phrase commercial or non-commercial is part of a public-domain dedication; debian/copyright's Unlicense paragraph is the same dedication. imagecodecs/licenses/LICENSE-jpeg, imagecodecs/licenses/LICENSE-libjpeg, imagecodecs/licenses/LICENSE-libjpeg-turbo, imagecodecs/licenses/LICENSE-mozjpeg, imagecodecs/licenses/LICENSE-libaivf and imagecodecs/licenses/LICENSE-jpg_0xc3 are copies of the IJG/libjpeg-turbo/mozjpeg/dcm2niix terms, which bind those libraries and programs and not this package, whose code ships none of them. imagecodecs/licenses/LICENSE-lzham is an anti-copyright waiver.
  • 3rdparty/jpegsof3's The Software has been developed for research purposes only and is not a clinical tool, in jpegsof3.cpp:9 and jpegsof3.h:9, sits inside the BSD-3-Clause preamble quoted from dcm2niix and is a disclaimer, not a field-of-use restriction; Debian's main archive already ships dcm2niix (apt-cache show dcm2niix), whose code carries that same wording.
  • Each 3rdparty component matches its stanza and licence kind: ccitt.c and wic.cpp SPDX-License-Identifier: 0BSD; pixarlog.c SPDX-License-Identifier: HPND-sell-variant with the libtiff text in the stanza; qoi.h MIT/Expat; liblj92 Expat; openjpeg BSD-2-Clause (no patent grant, but that is no restriction beyond the licence); hdf5 the HDF5 licence; netcdf-c and jpegsof3 BSD-3-Clause; postgresql the PostgreSQL licence; cfitsio the NASA/CFITSIO notice; bcdec Expat/Unlicense.
  • The rest of the tree (imagecodecs/*.py, *.pyx, *.pxd, .pyi, imcd.c, tests/.py, setup.py, README.rst, CHANGES.rst, pyproject.toml, MANIFEST.in) carries Copyright (c) ... Christoph Gohlke with the BSD-3-Clause text, as Files: * states; no GPL, LGPL, MPL or non-commercial code exists anywhere in the tree.
  • Packaging mechanics are sound: compat 14 means dh_gencontrol adds ${shlibs:Depends} and the other relationship substvars itself, so their absence from debian/control is not a fault; python3-numpy is likewise pulled into ${python3:Depends} by dh_python3 from the dist-info Requires-Dist generated from setup.py's install_requires=['numpy>=2.1']; Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1; the changelog is well-formed and targeted at unstable; patches are applied with 3.0 (quilt) and debian/source/options only ignores egg-info diffs.
  • Testsuite: autopkgtest-pkg-pybuild is declared, and dh-python provides the pybuild autopkgtest runner (read at /usr/share/dh-python/pybuild-autopkgtest); the absence of debian/tests/ is not a fault.
  • Coverage: I read debian/copyright, control, rules, changelog, all three patches and series, source/format and source/options in full, every 3rdparty file header and licence, the headers of all top-level and imagecodecs source files, and the test-data directories; binary test data were judged by name, location and role only.
  • uscan found the packaged version as the newest upstream release (upstream 2026.10.10, packaged 2026.10.10+ds1).
Not confirmed ◂
  • The provenance of the sample images that are not generated by the tests, such as tests/data/fixedpoint.jxr, tests/data/frames.webp, tests/data/rgb.u1.jpg, tests/data/int8_4bit.j2k, tests/data/384x256.hdr and tests/data/rgba.u1.strict_disabled.avif: they are binary and appear to come from third-party test suites, but Files: * attributes them solely to Christoph Gohlke under BSD-3-Clause, and nothing in the package documents their origin.
  • tests/data/libaec/121B2TestData/README121BTest.txt is not valid UTF-8 and could not be read; any attribution or licence statement it makes was not checked against the Files: tests/data/libaec/* stanza.
Proposed changes ◂

None.

Uploader's response to the LLM review

Waiting for the uploader's response until , because the review found serious issues.

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
2026.10.10+ds1-1 4e6e9e85… 2026-10-31 22:30 2026-10-31 22:30 dfsg-uploader rejected VIEW

Back to Dashboard | View all reviews for this package