python-imagecodecs 2026.10.10+ds1-2
Package Information
| Description | Image transformation, compression/decompression codecs Decode and/or encode functions are implemented for many compressors, image formats, filters, shufflers, checksummers and so on. Due to some of the dependencies not being available in Debian, only a small subset of these are enabled in the Debian package (those required by a depending package). Others may be enabled upon request. |
|---|---|
| Maintainer | Debian PaN Maintainers <debian-pan-maintainers@alioth-lists.debian.net> |
| Changed By | Roland Mas <lolando@debian.org> |
| Sponsor | lolando@debian.org |
| Distribution | unstable |
| Architecture | any |
| VCS | git: https://salsa.debian.org/python-team/packages/python-imagecodecs.git (browse) |
| Tracker | https://tracker.debian.org/pkg/python-imagecodecs |
| Uploaded | 1 hour ago |
New Package Report
.changes
| Changed-By | Roland Mas <lolando@debian.org> |
|---|---|
| Architecture | source amd64 |
| Distribution | unstable |
| Date | Wed, 04 Nov 2026 21:44:29 +0100 |
| Source | python-imagecodecs |
| Version | 2026.10.10+ds1-2 |
Changelog
python-imagecodecs (2026.10.10+ds1-2) unstable; urgency=medium . * Update debian/copyright. * Disable building some (many) of the modules. . python-imagecodecs (2026.10.10+ds1-1) unstable; urgency=medium . * Initial packaging.
.dsc
| Section | python |
|---|---|
| Priority | optional |
| Component | main |
| Package-List | python3-imagecodecs deb python optional arch=any |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: imagecodecs
Upstream-Contact: Christoph Gohlke <cgohlke@cgohlke.com>
Source: https://github.com/cgohlke/imagecodecs
Files-Excluded:
3rdparty/liblzf
3rdparty/libspng
Files: *
Copyright: Copyright (c) 2008-2026, Christoph Gohlke
License: BSD-3-Clause
Files: 3rdparty/bcdec/*
Copyright: 2022 Sergii Kudlai
License: Expat or Unlicense
Files: 3rdparty/ccitt/*
Copyright: Christoph Gohlke
License: 0BSD
Files: 3rdparty/liblj92/*
Copyright: Andrew Baldwin 2014
License: Expat
Files: 3rdparty/wic/*
Copyright: Christoph Gohlke
License: 0BSD
Files: 3rdparty/openjpeg/*
Copyright:
2002-2014, Universite catholique de Louvain (UCL), Belgium
2002-2014, Professor Benoit Macq
2003-2014, Antonin Descampe
2003-2009, Francois-Olivier Devaux
2005, Herve Drolon, FreeImage Team
2002-2003, Yannick Verschueren
2001-2003, David Janssens
2011-2012, Centre National d'Etudes Spatiales (CNES), France
2012, CS Systemes d'Information, France
License: BSD-2-Clause
Files: 3rdparty/pixarlog/*
Copyright:
1996-1997 Sam Leffler
1996 Pixar
Christoph Gohlke
License: libtiff
Comment: The file contents mention HPND-sell-variant but do not include it
Files: 3rdparty/bitshuffle/*
Copyright: 2014 Kiyoshi Masui <kiyo@physics.ubc.ca>
License: Expat
Files: 3rdparty/qoi/*
Copyright: 2022 Dominic Szablewski
License: Expat
Files: 3rdparty/cfitsio/*
Copyright: U.S. Government as represented by the Administrator of the National Aeronautics and Space Administration
License: CFITSIO
Copyright (Unpublished--all rights reserved under the copyright laws of
the United States), U.S. Government as represented by the Administrator
of the National Aeronautics and Space Administration. No copyright is
claimed in the United States under Title 17, U.S. Code.
.
Permission to freely use, copy, modify, and distribute this software
and its documentation without fee is hereby granted, provided that this
copyright notice and disclaimer of warranty appears in all copies.
.
DISCLAIMER:
.
THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND,
EITHER EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO,
ANY WARRANTY THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY
IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE, AND FREEDOM FROM INFRINGEMENT, AND ANY WARRANTY THAT THE
DOCUMENTATION WILL CONFORM TO THE SOFTWARE, OR ANY WARRANTY THAT THE
SOFTWARE WILL BE ERROR FREE. IN NO EVENT SHALL NASA BE LIABLE FOR ANY
DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL OR
CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM, OR IN ANY WAY
CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY,
CONTRACT, TORT , OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY
PERSONS OR PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED
FROM, OR AROSE OUT OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR
SERVICES PROVIDED HEREUNDER.
Files: 3rdparty/hdf5/*
Copyright:
2006-2012 by The HDF Group.
1998-2006 by the Board of Trustees of the University of Illinois.
License:
All rights reserved.
.
Redistribution and use in source and binary forms, with or without
modification, are permitted for any purpose (including commercial purposes)
provided that the following conditions are met:
.
1. Redistributions of source code must retain the above copyright notice,
this list of conditions, and the following disclaimer.
.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions, and the following disclaimer in the documentation
and/or materials provided with the distribution.
.
3. In addition, redistributions of modified forms of the source or binary
code must carry prominent notices stating that the original code was
changed and the date of the change.
.
4. All publications or advertising materials mentioning features or use of
this software are asked, but not required, to acknowledge that it was
developed by The HDF Group and by the National Center for Supercomputing
Applications at the University of Illinois at Urbana-Champaign and
credit the contributors.
.
5. Neither the name of The HDF Group, the name of the University, nor the
name of any Contributor may be used to endorse or promote products derived
from this software without specific prior written permission from
The HDF Group, the University, or the Contributor, respectively.
.
DISCLAIMER:
THIS SOFTWARE IS PROVIDED BY THE HDF GROUP AND THE CONTRIBUTORS
"AS IS" WITH NO WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED. In no
event shall The HDF Group or the Contributors be liable for any damages
suffered by the users arising out of the use of this software, even if
advised of the possibility of such damage.
Files: 3rdparty/jpegsof3/*
Copyright: 2014-2016 Chris Rorden
License: BSD-3-Clause
Files: 3rdparty/netcdf-c/*
Copyright: 2018 Unidata
License: BSD-3-Clause
Files: 3rdparty/postgresql/*
Copyright:
1994, The Regents of the University of California
1996-2021, PostgreSQL Global Development Group
License: PostgreSQL
Permission to use, copy, modify, and distribute this software and its
documentation for any purpose, without fee, and without a written agreement
is hereby granted, provided that the above copyright notice and this
paragraph and the following two paragraphs appear in all copies.
.
IN NO EVENT SHALL THE UNIVERSITY OF CALIFORNIA BE LIABLE TO ANY PARTY FOR
DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, INCLUDING
LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE AND ITS
DOCUMENTATION, EVEN IF THE UNIVERSITY OF CALIFORNIA HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
.
THE UNIVERSITY OF CALIFORNIA SPECIFICALLY DISCLAIMS ANY WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. THE SOFTWARE PROVIDED HEREUNDER IS
ON AN "AS IS" BASIS, AND THE UNIVERSITY OF CALIFORNIA HAS NO OBLIGATIONS TO
PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.
Files: imagecodecs/licenses/*
Copyright: see the relevant files in 3rdparty/
License:
These are the license texts of the respective third-party
libraries. Each one is either outside the scope of copyright, or
governed by itself.
Files: tests/data/libaec/*
Copyright:
Mathis Rosenhauer, Moritz Hanke, Joerg Behrens, Deutsches Klimarechenzentrum GmbH
Luis Kornblueh, Max-Planck-Institut fuer Meteorologie
License: BSD-2-Clause
Files: tests/data/lerc/*
Copyright:
License: Apache-2.0
On Debian systems
Files: debian/*
Copyright: 2026 Roland Mas <lolando@debian.org>
License: BSD-3-Clause
License: BSD-3-Clause
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
.
1. Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
.
3. Neither the name of the copyright holder nor the names of its
contributors may be used to endorse or promote products derived from
this software without specific prior written permission.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
License: Expat
Permission is hereby granted, free of charge, to any person obtaining
a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:
.
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
License: Unlicense
This is free and unencumbered software released into the public
domain.
.
Anyone is free to copy, modify, publish, use, compile, sell, or
distribute this software, either in source code form or as a compiled
binary, for any purpose, commercial or non-commercial, and by any
means.
.
In jurisdictions that recognize copyright laws, the author or authors
of this software dedicate any and all copyright interest in the
software to the public domain. We make this dedication for the
benefit of the public at large and to the detriment of our heirs and
successors. We intend this dedication to be an overt act of
relinquishment in perpetuity of all present and future rights to this
software under copyright law.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY
CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
License: 0BSD
Permission to use, copy, modify, and/or distribute this software for
any purpose with or without fee is hereby granted.
.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL
WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.
License: libtiff
Permission to use, copy, modify, distribute, and sell this software
and its documentation for any purpose is hereby granted without fee,
provided that (i) the above copyright notices and this permission
notice appear in all copies of the software and related
documentation, and (ii) the names of Pixar, Sam Leffler and Silicon
Graphics may not be used in any advertising or publicity relating to
the software without the specific, prior written permission of Pixar,
Sam Leffler and Silicon Graphics.
.
THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND,
EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY
WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
.
IN NO EVENT SHALL PIXAR, SAM LEFFLER OR SILICON GRAPHICS BE LIABLE
FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY
KIND, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
PROFITS, WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON
ANY THEORY OF LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE
OR PERFORMANCE OF THIS SOFTWARE.
License: BSD-2-Clause
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
.
1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS `AS IS'
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
DFSG Assistant LLM REVIEW 1 blocker, 2 important, 5 minor
This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.
Reviewed 0 hours ago.
Report
DFSG NEW review for python-imagecodecs version 2026.10.10+ds1-2
Summary
- Licensing is DFSG-compliant and
debian/copyrightis accurate: No - Packaging is of good quality: Yes
- Issues: 1 blocker, 2 important, 5 minor
- debian/watch: version 5
- debian/copyright: machine-readable
- Scan before the review: 118 found (61 not listed by the scan, so not checked)
Licensing
debian/copyright is in DEP-5 format and gets most of the tree right: the main codecs and 3rdparty components carry permissive licences (BSD-3-Clause, Expat, 0BSD, BSD-2-Clause, Unlicense, HDF5, PostgreSQL, CFITSIO, HPND-sell-variant, Apache-2.0), all compatible with each other, and their texts are reproduced. One vendored component, 3rdparty/rgbe, carries no licence grant at all and is nevertheless covered by Files: * as Christoph Gohlke's BSD-3-Clause code; it is compiled into the shipped module. Two stanzas also omit a copyright holder that the files themselves name, and one test-data stanza has an empty Copyright field and a truncated licence text.
Packaging
The packaging is conventional and would build: 3.0 (quilt), debhelper compat 14 with dh and pybuild, a clean single binary package, autopkgtest-pkg-pybuild, Standards-Version 4.7.4 against Policy 4.7.4.1, and a sensible changelog. The remaining defects are minor: a long list of Build-Depends for extensions the package deliberately does not build, one of which (libzlcore-dev) is a different library altogether, and two patches that do more than their subject says, one of them silently skipping upstream tests and the other deleting upstream's Windows build customization.
Issues
blocker licensing 1. 3rdparty/rgbe has no licence grant, but Files: * licenses it BSD-3-Clause as Christoph Gohlke's code ◂
- Files:
3rdparty/rgbe/rgbe.c:1-27,3rdparty/rgbe/rgbe.h:3-5,debian/copyright:11-14,setup.py:265-267,setup.py:375 - Basis: checked, in the package or with a reference tool
- Evidence:
/* THIS CODE CARRIES NO GUARANTEE OF USABILITY OR FITNESS FOR ANY PURPOSE. ... IT IS STRICTLY USE AT YOUR OWN RISK. */,written by Bruce Walter (bjw@graphics.cornell.edu) 5/26/95 based on code written by Greg Ward, and onlyfeel free to modify it to suit your needs. No copyright notice and no permission to copy or distribute appears anywhere in rgbe.c, rgbe.h or rgbe.txt; no stanza other thanFiles: *(Copyright (c) 2008-2026, Christoph Gohlke; License: BSD-3-Clause) matches the directory, and imagecodecs/licenses/ has no rgbe entry. - Problem: A warranty disclaimer is not a licence: nothing in these files grants permission to copy, modify or distribute the code, so shipping it, let alone modified, is not authorised (Policy 2.2.1 and the DFSG social contract require a free licence for every file). debian/copyright is also inaccurate, attributing the file to Gohlke under BSD-3-Clause. The code is not dormant: the
rgbeextension is in EXTENSIONS_DEBIAN and is built from3rdparty/rgbe/rgbe.c, so it is in the shipped python3-imagecodecs. - Fix: Ask upstream to establish and record the licence of the original Walter/Ward code and add it to debian/copyright; if no grant can be obtained, stop building the rgbe extension (drop it from EXTENSIONS_DEBIAN) and remove the files with the +ds repack, reporting it upstream. Do not record a licence for them in debian/copyright that the files do not grant.
important licensing 2. Files: 3rdparty/bitshuffle/* does not name the European Synchrotron Radiation Facility ◂
- Files:
debian/copyright:44-46,3rdparty/bitshuffle/hdf5_dl.c:1-5 - Basis: checked, in the package or with a reference tool
- Evidence: hdf5_dl.c:
# Copyright (c) 2019 European Synchrotron Radiation Facility/# Permission is hereby granted, free of charge...(Expat); the stanza says onlyCopyright: 2014 Kiyoshi Masui <kiyo@physics.ubc.ca>,License: Expat. - Problem: The stanza is the one that applies to 3rdparty/bitshuffle/* and it omits a holder whose notice is in the file, so debian/copyright does not describe the copyright of that file (Debian Policy 12.5, copyright-format 5.2).
- Fix: Add
2019 European Synchrotron Radiation Facilityto the Copyright field of the 3rdparty/bitshuffle/* stanza (licence stays Expat).
important licensing 3. Files: 3rdparty/netcdf-c/* does not name the University Corporation for Atmospheric Research ◂
- Files:
debian/copyright:120-122,3rdparty/netcdf-c/nc4var.c:1,3rdparty/netcdf-c/COPYRIGHT:1 - Basis: checked, in the package or with a reference tool
- Evidence: nc4var.c:
/* Copyright 2003-2018, University Corporation for Atmospheric/Research ...; the stanza says onlyCopyright: 2018 Unidata. - Problem: Unidata is a project of UCAR, not the copyright holder named in the file; the holder named in the file is missing from debian/copyright, so the file's copyright is misdescribed (Policy 12.5, copyright-format 5.2).
- Fix: Extend the Copyright field to name
2003-2018 University Corporation for Atmospheric Research(and keep Unidata if desired), licence unchanged (BSD-3-Clause).
minor licensing 4. Files: 3rdparty/jpegsof3/* leaves out Christoph Gohlke's copyright on the modified files ◂
- Files:
debian/copyright:114-116,3rdparty/jpegsof3/jpegsof3.cpp:63,3rdparty/jpegsof3/jpegsof3.cpp:77,3rdparty/jpegsof3/jpegsof3.h:12 - Basis: checked, in the package or with a reference tool
- Evidence: jpegsof3.cpp:
Copyright(c) 2014 - 2016 Chris Rorden. All rights reserved.followed byThe changes are released under the BSD 3-Clause License: Copyright (c) 2018-2026, Christoph Gohlke; the stanza lists only2014-2016 Chris Rorden. - Problem: Later stanzas override earlier ones, so this stanza replaces the Files: * attribution for these files and drops the holder of the extensive Gohlke changes recorded in the file. debian/copyright therefore describes the file as having one holder when it has two (Policy 12.5). The neighbouring
3rdparty/pixarlog/*stanza does listChristoph Gohlke, so this is an omission, not a policy choice. - Fix: Add
2018-2026 Christoph Gohlketo the Copyright field of the 3rdparty/jpegsof3/* stanza.
minor licensing 5. Files: tests/data/lerc/* has an empty Copyright field and only a fragment of the Apache-2.0 licence text ◂
-
Files:
debian/copyright:139-143,tests/data/lerc/readme.txt -
Basis: checked, in the package or with a reference tool
-
Evidence:
Files: tests/data/lerc/* Copyright: License: Apache-2.0 On Debian systemswhile tests/data/lerc/readme.txt says
https://github.com/Esri/lerc/tree/master/testData/Apache License - 2.0. -
Problem: Copyright is a required field and is empty here, so the holder (Esri, whose testData this is) is not named (copyright-format 5.2, Policy 12.5). The License field has trailing lines but they are neither the licence text nor a pointer to a file under /usr/share/common-licenses, which copyright-format 6.7 requires once any text follows the short name;
Apache-2.0also has no stand-alone License paragraph to explain it (6.7). -
Fix: Give the stanza a real Copyright field naming Esri, and either drop the trailing text so the Apache-2.0 short name stands alone, or replace it with a proper pointer to /usr/share/common-licenses/Apache-2.0.
minor packaging 6. Build-Depends carries 21 entries for extensions the patch disables, including libzlcore-dev, which is fbreader's ZLibrary ◂
- Files:
debian/control:14-52,debian/patches/0003-Select-a-set-of-extensions-to-build.patch:7-80 - Basis: checked, in the package or with a reference tool
- Evidence: EXTENSIONS_DEBIAN comments out aec, avif, blosc, blosc2, bz2, deflate, exr, gif, heif, jpeg2k, meshopt, png, spng, ultrahdr, wavpack, zfp, zopfli, zstd, while Build-Depends still lists libaec-dev, libavif-dev, libblosc-dev, libblosc2-dev, libbz2-dev, libdeflate-dev, libgif-dev, libheif-dev, libmeshoptimizer-dev, libopenexr-dev, libopenjp2-7-dev, libpng-dev, libspng-dev, libuhdr-dev, libwavpack-dev, libzfp-dev, libzopfli-dev, libzstd-dev, libzlcore-dev, dbus and dbus-daemon.
apt-cache show libzlcore-devgivesSource: fbreader,ZLibrary cross-platform development library;grep dbus tests/finds nothing. - Problem: Eighteen of these are development packages nothing is compiled against, and libzlcore-dev is not a compression library at all but the GUI toolkit library from fbreader, so every build pulls in an unrelated dependency chain for nothing; the two dbus entries are likewise unused by the test suite. This is dependency bloat for builders and for the bootstrap, and the fbreader entry suggests a lookup mistake rather than an intent.
- Fix: Drop the Build-Depends of the extensions commented out in EXTENSIONS_DEBIAN, replace or remove libzlcore-dev, and drop dbus/dbus-daemon unless a test needs them.
minor packaging 7. Patch 0002 skips upstream jpeg8+rgba tests without saying why and without forwarding it ◂
-
Files:
debian/patches/0002-Skip-some-jpeg8-alpha-tests.patch:1-25 -
Basis: checked, in the package or with a reference tool
-
Evidence:
+ if itype == 'rgba': + pytest.skip('skipping jpeg8+rgba')and the same for
itype == 'rgba' and dtype == 'uint8'; the patch has noForwarded,Bugor explanation beyond the subjectSkip some jpeg8+alpha tests. -
Problem: The patch removes real coverage of a codec that the package ships, so a regression in jpeg8 alpha handling can no longer be caught; a reader cannot tell whether this is an upstream bug, a difference in Debian's libjpeg-turbo, or a workaround for the build options. Patches should be minimal, documented and forwarded (Policy 4.3, DEP-3).
-
Fix: Investigate the failure, record the cause in the patch description or a
Bug:header, mark itForwarded: not-neededwith the reason if Debian-specific, and send it upstream; otherwise drop it.
minor packaging 8. Patches 0001/0003 delete customize_build_cgohlke, still referenced at setup.py:1069, and merge its body into customize_build_default ◂
- Files:
debian/patches/0001-Use-system-libs.patch:1-56,debian/patches/0003-Select-a-set-of-extensions-to-build.patch:80-200,setup.py:1067-1079,setup.py:441-460 - Basis: checked, in the package or with a reference tool
- Evidence: The hunk
@@ -369,49 +447,9 @@removesdef customize_build_cgohlke(...), leaving its remaining body (static library names for aec, webp, tiff, jpegxl and the Windows/MSVCif 'ARM64' in sys.versionbranch) appended tocustomize_build_default, while setup.py:1069 still doescustomize_build = customize_build_cgohlke. - Problem: The patches go far beyond their subjects (
Use system libs,Select a set of extensions to build): they change the behaviour of the non-Debian default build, remove upstream's Windows build customization, and leave a NameError on that code path. That makes the patches hard to review and impossible to forward as they stand, and future upstream merges of that region will conflict. - Fix: Confine the patches to the library substitutions and the extension selection; keep customize_build_cgohlke in place, or drop the Windows branch and its call site together as a separately documented, forwarded patch.
Verified ◂
- debian/copyright is DEP-5 with the correct Format URL; every stand-alone licence it uses is defined there, and the permissive licences not in /usr/share/common-licenses (HDF5, PostgreSQL, CFITSIO, libtiff/HPND-sell-variant, 0BSD, Expat, BSD-2-Clause, Unlicense) have their full text in the file.
- Files-Excluded names 3rdparty/liblzf and 3rdparty/libspng; neither is in the tree, Debian ships liblzf-dev and libspng-dev, and patch 0001 links the system versions, so the +ds repack is consistent with the packaging.
- All the binary and compressed files in the prescan are codec fixtures under tests/data, not built code. Compressed ones: tests/data/zstd_stream.bin (zstd stream used to test the zstd stream decoder) and tests/data/lerc/zstd.lerc2 (a zstd-compressed LERC2 image). Unrecognised binaries I enumerate: tests/data/384x256.hdr and tests/data/384x256.rgbe.bin (the same Radiance HDR image in HDR and raw RGBE form), tests/data/384x256.rgb9_e5.bin (packed RGB9_E5 float pixels), tests/data/bytes.bin, tests/data/bytes.bitorder.bin, tests/data/bytes.lzw_horizontal.bin, tests/data/gray.u1.br (brotli-compressed 1-bit grey), tests/data/hcomp_i16_32x31_scale0.bin, tests/data/hcomp_i32_32x31_scale0.bin and tests/data/hcomp_i32_32x31_scale4.bin (cfitsio HCOMPRESS fixtures), tests/data/image_noeoi.bin and tests/data/image_noeoi.lzw.bin (truncated-JPEG corpus), tests/data/corrupt.lzw.bin, tests/data/fixedpoint.jxr, tests/data/int8_4bit.j2k, plus tests/data/libaec/121B2TestData/AllOptions/.rz and .dat, tests/data/lerc/.lerc1/.lerc2 and tests/data/tiff/*.tif. No archives, compiled objects, minified code or generated sources were found anywhere else in the tree.
- The 45 holders the author check reports missing are almost all holders named inside imagecodecs/licenses/LICENSE-* and PATENTS-rav1e, which are verbatim copies of third-party licence texts, not shipped code; the
Files: imagecodecs/licenses/*stanza covers them. That includes imagecodecs/licenses/LICENSE-bcdec and LICENSE-jpg_0xc3, and the IJG/libjpeg/mozjpeg/libaivf texts named below. The substantive omissions are the bitshuffle, netcdf-c and jpegsof3 issues above. - Wording the scan flagged as rare or restrictive is not. 3rdparty/bcdec/LICENSE and 3rdparty/bcdec/bcdec.h carry the Unlicense, whose phrase
commercial or non-commercialis part of a public-domain dedication; debian/copyright's Unlicense paragraph is the same dedication. imagecodecs/licenses/LICENSE-jpeg, imagecodecs/licenses/LICENSE-libjpeg, imagecodecs/licenses/LICENSE-libjpeg-turbo, imagecodecs/licenses/LICENSE-mozjpeg, imagecodecs/licenses/LICENSE-libaivf and imagecodecs/licenses/LICENSE-jpg_0xc3 are copies of the IJG/libjpeg-turbo/mozjpeg/dcm2niix terms, which bind those libraries and programs and not this package, whose code ships none of them. imagecodecs/licenses/LICENSE-lzham is an anti-copyright waiver. - 3rdparty/jpegsof3's
The Software has been developed for research purposes only and is not a clinical tool, in jpegsof3.cpp:9 and jpegsof3.h:9, sits inside the BSD-3-Clause preamble quoted from dcm2niix and is a disclaimer, not a field-of-use restriction; Debian's main archive already ships dcm2niix (apt-cache show dcm2niix), whose code carries that same wording. - Each 3rdparty component matches its stanza and licence kind: ccitt.c and wic.cpp
SPDX-License-Identifier: 0BSD; pixarlog.cSPDX-License-Identifier: HPND-sell-variantwith the libtiff text in the stanza; qoi.h MIT/Expat; liblj92 Expat; openjpeg BSD-2-Clause (no patent grant, but that is no restriction beyond the licence); hdf5 the HDF5 licence; netcdf-c and jpegsof3 BSD-3-Clause; postgresql the PostgreSQL licence; cfitsio the NASA/CFITSIO notice; bcdec Expat/Unlicense. - The rest of the tree (imagecodecs/*.py, *.pyx, *.pxd, .pyi, imcd.c, tests/.py, setup.py, README.rst, CHANGES.rst, pyproject.toml, MANIFEST.in) carries
Copyright (c) ... Christoph Gohlkewith the BSD-3-Clause text, as Files: * states; no GPL, LGPL, MPL or non-commercial code exists anywhere in the tree. - Packaging mechanics are sound: compat 14 means dh_gencontrol adds ${shlibs:Depends} and the other relationship substvars itself, so their absence from debian/control is not a fault; python3-numpy is likewise pulled into ${python3:Depends} by dh_python3 from the dist-info
Requires-Distgenerated from setup.py'sinstall_requires=['numpy>=2.1']; Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1; the changelog is well-formed and targeted at unstable; patches are applied with 3.0 (quilt) and debian/source/options only ignores egg-info diffs. - Testsuite: autopkgtest-pkg-pybuild is declared, and dh-python provides the pybuild autopkgtest runner (read at /usr/share/dh-python/pybuild-autopkgtest); the absence of debian/tests/ is not a fault.
- Coverage: I read debian/copyright, control, rules, changelog, all three patches and series, source/format and source/options in full, every 3rdparty file header and licence, the headers of all top-level and imagecodecs source files, and the test-data directories; binary test data were judged by name, location and role only.
- uscan found the packaged version as the newest upstream release (upstream
2026.10.10, packaged2026.10.10+ds1).
Not confirmed ◂
- The provenance of the sample images that are not generated by the tests, such as tests/data/fixedpoint.jxr, tests/data/frames.webp, tests/data/rgb.u1.jpg, tests/data/int8_4bit.j2k, tests/data/384x256.hdr and tests/data/rgba.u1.strict_disabled.avif: they are binary and appear to come from third-party test suites, but Files: * attributes them solely to Christoph Gohlke under BSD-3-Clause, and nothing in the package documents their origin.
- tests/data/libaec/121B2TestData/README121BTest.txt is not valid UTF-8 and could not be read; any attribution or licence statement it makes was not checked against the
Files: tests/data/libaec/*stanza.
Proposed changes ◂
None.
Uploader's response to the LLM review
Waiting for the uploader's response until , because the review found serious issues.
Other Reviews of this Package
| Version | Hash | Allocated | Completed | Reviewer | Status | Details |
|---|---|---|---|---|---|---|
| 2026.10.10+ds1-1 | 4e6e9e85… | 2026-10-31 22:30 | 2026-10-31 22:30 | dfsg-uploader | rejected | VIEW |