python-logfire 5.2.0-1

Package Information

Description	AI observability platform for production LLM and agent systems Logfire is Pydantic’s end-to-end AI engineering platform. It shows you what your agents, services, applications, and hosts are actually doing: every LLM call, request, and query, and how long each one took. Built on OpenTelemetry (OTel), the open standard for traces, metrics, and logs, it spans your whole stack, from AI agents to the databases and servers behind them.
Maintainer	Debian Python Team <team+python@tracker.debian.org>
Changed By	Pieter Lenaerts <plenae@disroot.org>
Sponsor	jcfp@debian.org
Distribution	unstable
Architecture	all
VCS	git: https://salsa.debian.org/python-team/packages/python-logfire.git (browse)
Closes	#1143122
Blocked Bugs	#1145925 (serious)
Tracker	https://tracker.debian.org/pkg/python-logfire
Uploaded	2 hours ago

New Package Report

.changes◂

Source	python-logfire
Version	5.2.0-1
Changed-By	Pieter Lenaerts <plenae@disroot.org>
Architecture	source all
Distribution	unstable
Date	Tue, 03 Nov 2026 11:36:09 +0000

Changelog◂

python-logfire (5.2.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1143122)

.dsc◂

Section	python
Priority	optional
Component	main
Package-List	python3-logfire deb python optional arch=all python3-logfire-api deb python optional arch=all

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/pydantic/logfire
Upstream-Name: logfire
Upstream-Contact: Pydantic Team <engineering@pydantic.dev>

Files:
 *
Copyright:
 2023 - 2026 Pydantic Team <engineering@pydantic.dev>
License: Expat

Files:
 debian/*
Copyright:
 2026 Pieter Lenaerts <plenae@disroot.org>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 1 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for python-logfire version 5.2.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: No
Packaging is of good quality: Yes
Issues: 1 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The source is entirely under the Expat (MIT) licence, whose full text is reproduced in debian/copyright, and no non-free terms, vendored third-party code or additional licence stanzas exist: a tree-wide search for Copyright/(C)/SPDX/Licensed under/GPL/Apache/MPL/public domain wording and for LICENSE/COPYING/NOTICE/AUTHORS files found only the single top-level LICENSE. That licence, however, names the holder as Pydantic Services inc., while debian/copyright's Files: * stanza credits Pydantic Team <engineering@pydantic.dev>, so the actual copyright holder is nowhere in the file. Otherwise the DEP-5 file is well formed and correctly covers debian/*.

Packaging

The packaging is careful and follows current practice: debhelper compat 14 with dh-sequence-python3/pybuild-plugin-pyproject, Standards-Version 4.7.4, correct Build-Depends vs Build-Depends-Indep with <!nocheck> markers, an arch-restricted pyarrow test dependency, ten DEP-3 annotated quilt patches with forwarding status and rationale, a real autopkgtest that runs the upstream suite against the installed packages, gbp/salsa-ci/upstream metadata, and a changelog closing the ITP. Two arch:all binary packages from the root and logfire-api/ sub-project, installed per-package in debian/rules; runtime Depends are generated by dh_python3 from the wheel metadata, and the one requirement dh_python3 cannot map itself (opentelemetry-instrumentation) is handled by debian/py3dist-overrides. No policy violation or functional defect found.

Issues

blocker licensing 1. Files: * names the Pydantic Team, but the only copyright notice in the source names Pydantic Services inc. ◂

Files: debian/copyright:7-9, LICENSE:3
Basis: checked, in the package or with a reference tool
Evidence: LICENSE:3: Copyright (c) 2023 - present Pydantic Services inc. versus debian/copyright Files: * stanza: Copyright: 2023 - 2026 Pydantic Team <engineering@pydantic.dev>
Problem: The Files: * stanza must state the holder that the file notices state. Pydantic Team <engineering@pydantic.dev> is the authors/Upstream-Contact value from pyproject.toml, not the copyright holder; the legal entity named in the licence notice (Pydantic Services inc.) is missing from debian/copyright, which therefore does not accurately describe the copyright of the source (copyright-format 1.0 section 6.6, Debian Policy 12.5).
Fix: Change the Files: * Copyright field to the holder in LICENSE, e.g. 2023 - 2026 Pydantic Services inc., keeping the Pydantic Team address only as Upstream-Contact if wanted.

Verified ◂

Prescan file accounted for: LICENSE:3 (Copyright (c) 2023 - present Pydantic Services inc.) is the single upstream copyright notice; it is what debian/copyright's holder should match — reported as the one issue.
Tree-wide search for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU General Public, GNU Lesser, Apache License, Mozilla Public, public domain, All rights reserved, non-commercial found no notice other than LICENSE and debian/copyright; no non-free terms and no relicensing.
Only one LICENSE/COPYING/NOTICE/AUTHORS file exists in the tree: top-level LICENSE (Expat/MIT). debian/copyright reproduces that licence text in full under a stand-alone License: Expat paragraph, and Files: * plus the later Files: debian/* stanza cover the whole tree.
No Files-Excluded in debian/copyright and no repack: the .dsc lists a single python-logfire_5.2.0.orig.tar.gz.
No copyright/licence headers in any .py or .pyi file (including the logfire-api/logfire_api/**/*.pyi stubs), so a single holder stanza is right in structure, only the name is wrong.
Documentation images under docs/images/ (PNG/GIF screenshots and vendor SVG logos such as anthropic.svg, soc2_logo.png) are upstream documentation assets, not installed by any binary package and covered by the project-wide Expat licence; nothing indicates a separate licence.
uv.lock and pyodide_test/package-lock.json are generated lock files, not built binaries; their inputs pyproject.toml/logfire-api/pyproject.toml and pyodide_test/package.json are all present.
No built artifacts found: no .so, .whl, .pyc, .zip, .pdf or minified JS/CSS in the tree.
debian/ files read in full: control, rules, changelog, copyright, README.Debian, py3dist-overrides, python3-logfire.examples, tests/control, tests/upstream-testsuite, upstream/metadata, gbp.conf, salsa-ci.yml, source/format, patches/series and all ten patches' headers/hunks.
Structural checks: dh $@ at compat 14 with pybuild; the dh_auto_test override guards itself with filter nocheck; dh_clean override removes .pybuild, .pytest_cache and pycache; Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1 in its first two components; changelog is 5.2.0-1 to unstable closing #1143122.
Dependencies checked with apt-cache: python3-opentelemetry-sdk 1.45.2 (upstream < 1.46.0), python3-opentelemetry-exporter-otlp-proto-http 1.45.2, python3-opentelemetry-instrumentation 0.65b0 (< 0.67b0), python3-httpx2 2.15.1, python3-inline-snapshot 0.36.0, python3-pydantic-handlebars 0.2.1, python3-pytest-examples 0.0.18, python3-opentelemetry-instrumentation-aiohttp-server 0.65b0, python3-pyarrow 25.0.0 (amd64) all exist, so the version pins in the generated Depends are satisfiable.
dh-python's fallback distribution map (/usr/share/dh-python/dist/cpython3_fallback) has no opentelemetry-instrumentation entry, so debian/py3dist-overrides is needed; the other runtime requirements map from the fallback and are emitted without versions, hence no unsatisfiable upper bound from < 1.46.0/< 0.67b0 reaches the binary Depends.
Patches: test-only skips carry specific reasons and Forwarded: not-needed; support-old-protobuf-MessageToJson.patch and normalize-unknown-service-name-python3.patch are runtime fixes with rationale; no patch is obsolete in a way visible from the tree.
uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 5.4.0, packaged 5.2.0), which is not a fault of the package.

Not confirmed ◂

None.

Proposed changes ◂

None.

Uploader's response to the LLM review

Waiting for the uploader's response until 2026-11-04 13:15 UTC, because the review found serious issues.

Back to Dashboard | View all reviews for this package