DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: python-peritheos 0.18.0+ds1-1

Package Information

Descriptionthermodynamic equations of state calculations

A Python library for thermodynamic equations of state calculations for solid materials.

Built-in EOS evaluation, inversion, bounded robust fitting, and uncertainty statistics are implemented in Rust and exposed through the established Python API. NumPy broadcasting and user-defined EosBase subclasses remain supported. The package includes PEP 561 typing metadata for type checkers and IDEs.

MaintainerDebian PaN Maintainers <debian-pan-maintainers@alioth-lists.debian.net>
Changed ByRoland Mas <lolando@debian.org>
Sponsorlolando@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/python-team/packages/python-peritheos.git (browse)
Trackerhttps://tracker.debian.org/pkg/python-peritheos
Uploaded3 hours ago

New Package Report

.changes◂
DateWed, 11 Nov 2026 15:55:00 +0100
Sourcepython-peritheos
Version0.18.0+ds1-1
Changed-ByRoland Mas <lolando@debian.org>
Architecturesource amd64
Distributionunstable
Changelog◂ 
python-peritheos (0.18.0+ds1-1) unstable; urgency=medium
 .
   * Initial packaging.
.dsc◂
Sectionpython
Priorityoptional
Componentmain
Package-Listpython3-peritheos deb python optional arch=any
debian/copyright◂ 
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: dioptas
Upstream-Contact: Clemens Prescher <clemens.prescher@gmail.com>
Source: https://github.com/CPrescher/peritheos
Files-Excluded:
 peritheos/data/datasets/*
 peritheos/data/third_party/*

Files: *
Copyright: 2026, Clemens Prescher <clemens.prescher@gmail.com>
License: Expat

Files: debian/*
Copyright: 2026, Roland Mas <lolando@debian.org>
License:

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 3 blocker, 4 important, 3 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for python-peritheos version 0.18.0+ds1-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: No
  • Packaging is of good quality: No
  • Issues: 3 blocker, 4 important, 3 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: 73 found, 3 not mentioned in this report

Licensing

The source package is not DFSG-free as it stands. It carries third-party material with no licence grant at all: the EoSFit7GUI help pages state Copyright (c) 2013-2021 by RJA-JGP-MA-MLM. All Rights Reserved. and the package also ships otool -tvV disassemblies of that third-party binary. It further ships data tables (inline rows in peritheos/data/materials/*.eosmat, plus the study records in peritheos/data/studies/) that the package's own inventory in docs/data/license-inventory/files.csv marks as mixed_scientific_content / source_terms_not_recorded, with the instruction to exclude them from a cleared archive; several carry explicit CC BY-NC or CC BY-NC-ND source terms. debian/copyright nevertheless declares every upstream file to be Expat, copyright 2026 Clemens Prescher, and therefore omits both these non-free files and the genuine CC BY 4.0 third-party works that are included (Katsura's MATLAB files and workbook, Hu et al.'s PANGAEA table, Takahashi et al.'s MDPI article and supplements, Morard's author files). It also gives no licence for debian/* (empty License: field) and names the wrong upstream project.

Packaging

The mechanical packaging (compat 13, pybuild + pyproject + maturin, dh-cargo setup, Standards-Version 4.7.4 against Policy 4.7.4.1, sane changelog and control) is broadly conventional, but the repack is incomplete: +ds1 removes only peritheos/data/datasets/* and peritheos/data/third_party/*, leaving the entire research-evidence tree that upstream's own pyproject.toml excludes from its distributions, including publisher PDFs and supplementary files and the non-cleared audit artifacts. Because third_party/rust was dropped from both the source and the build, the extension's statically linked Rust crates have no licence notices anywhere, which Policy 12.5 requires. The test suite is never run: override_dh_auto_test is empty and the only autopkgtest is autodep8's import peritheos. The patches carry no DEP-3 Description:/Forwarded: fields, two of them share the number 0003, and one mixes an unrelated edit with its stated purpose.

Issues

blocker licensing 1. Source ships EoSFit7GUI help pages marked 'All Rights Reserved' and disassembly of its binary ◂
  • Files: docs/data/fes-eosfit-version-audit/EoSFitanddisplay.html, docs/data/fes-eosfit-version-audit/EoSFitanddisplay.txt, docs/data/fes-eosfit-version-audit/VersionInfo.html, docs/data/fes-eosfit-version-audit/VersionInfo.txt, docs/data/fes-eosfit-version-audit/eosfit7c-cfml_eos_mp_ethdebye.asm.txt, docs/data/fes-eosfit-version-audit/eosfit7gui-cfml_eos_mp_pthermal.asm.txt, docs/data/fes-eosfit-version-audit/manifest.json, docs/data/license-inventory/files.csv:367-378, debian/copyright:9-11
  • Basis: checked, in the package or with a reference tool
  • Evidence: EoSFitanddisplay.html footer: Copyright &copy; 2013-2021 by RJA-JGP-MA-MLM. All Rights Reserved.; manifest.json: "disassembly_qualification": "otool -tvV output; remove leading instruction addresses ..."; files.csv for all thirteen files: source_terms_not_recorded,...,See component/source scopes; no blanket source license established,...,otherwise exclude from a cleared source archive.
  • Problem: This is verbatim third-party documentation and a disassembly derived from a third-party executable, distributed with an explicit all-rights-reserved notice and no permission to copy, distribute or modify. It makes the source package non-free (DFSG 1 and 3), and debian/copyright falsely declares these files to be Expat-licensed code of Clemens Prescher.
  • Fix: Repack the files out (add docs/data/fes-eosfit-version-audit/ to Files-Excluded and regenerate the tarball), or obtain and document a licence from the rightsholder; do not keep them under the Expat stanza.
blocker licensing 2. Shipped .eosmat and study data are marked by the package's own inventory as having no established licence ◂
  • Files: peritheos/data/materials/gold.eosmat:4502, peritheos/data/materials/mgo.eosmat:5204, peritheos/data/materials/mgo.eosmat:6088, peritheos/data/materials/iron.eosmat:8085, peritheos/data/materials/platinum.eosmat:4830, peritheos/data/materials/rhenium.eosmat:1415, peritheos/data/materials/tungsten.eosmat:1514, peritheos/data/materials/molybdenum.eosmat:1869, peritheos/data/materials/e_feooh.eosmat:265, peritheos/data/materials/fe088sio3_bridgmanite.eosmat:249-251, peritheos/data/studies/argon-barker-1987.json:234, docs/data/license-inventory/files.csv:4797,4829,4905,5030
  • Basis: checked, in the package or with a reference tool
  • Evidence: gold.eosmat:4502: "license": "Peritheos contributors release only their transcription, normalization code and metadata under CC0-1.0. This does not license third-party sources or rights in their contents. Sakai article rights: CC BY-NC-ND 4.0; ..."; fe088sio3_bridgmanite.eosmat:249: "license": "CC BY-NC 4.0"; e_feooh.eosmat:265: copyright 2016 Japan Association of Mineralogical Sciences and exposes no open data license; inventory rows for these files: mixed_scientific_content,mixed_scientific_content,See component/source scopes; no blanket source license established,...,otherwise exclude from a cleared source archive.
  • Problem: These files (and the inline observation rows they contain, e.g. mgo.eosmat:5204) are shipped in the source, and peritheos_build.stage_core copies them into the binary with runtime_document. Their only stated grant is a CC0 dedication of the contributors' transcription, explicitly not of the content, over sources that are CC BY-NC / CC BY-NC-ND or of unrecorded terms. No free licence therefore covers what Debian would distribute, and several entries carry non-commercial/no-derivatives terms, which DFSG 1 and 6 exclude.
  • Fix: Restrict the packaged data to entries whose rightsholders granted a free licence (as is done for the PANGAEA, COD CC0 and CC BY 4.0 material), and remove or replace the entries the package's own inventory cannot clear; record each remaining licence per file in debian/copyright.
blocker licensing 3. debian/copyright omits the CC BY 4.0 holders and licences of included third-party works ◂
  • Files: debian/copyright:9-11, docs/data/forsterite-katsura-2022-sources/forsterite-katsura-2022-author-fitting.m, docs/data/forsterite-katsura-2022-sources/forsterite-katsura-2022-author-geotherm.m, docs/data/forsterite-katsura-2022-sources/forsterite-katsura-2022-source.xlsx, peritheos/data/research/cementite/hu-2019-pangaea-table1.xlsx, output/cementite-eos-audit-2026-10-25/sources/takahashi-2019.pdf, output/cementite-eos-audit-2026-10-25/sources/minerals-09-00744-s001.zip, output/cementite-eos-audit-2026-10-25/sources/minerals-630318-supplementary.xlsx, docs/data/fes-author-eosfit/sources/FeS6.eos, docs/data/fes-author-eosfit/sources/FeS6EOSfittot-SataOhfuji.dat
  • Basis: checked, in the package or with a reference tool
  • Evidence: debian/copyright:9-11: Files: * / Copyright: 2026, Clemens Prescher ... / License: Expat; inventory files.csv:536-538: third_party_code_open,...,CC-BY-4.0,katsura-zenodo; files.csv:4988: open_source_declared,...,CC-BY-4.0,hu-pangaea; takahashi-2019.pdf last page: (c) 2019 by the authors. Licensee MDPI ... Creative Commons Attribution (CC BY) license; peritheos/data/LICENSING.md table: FeS Morard author inputs | Maintainer-reported author CC BY 4.0.
  • Problem: DEP-5 requires each file's copyright holders and licence; here genuine third-party CC BY 4.0 works remain in the source (and the PANGAEA workbook in the binary tree) while the catch-all stanza names only Clemens Prescher and Expat. The CC BY 4.0 text exists only as LICENSES/CC-BY-4.0.txt, which debian/copyright neither references nor reproduces, and CC-BY-4.0 is not in /usr/share/common-licenses. Under Policy 12.5 the binary's copyright file must carry the licences it distributes.
  • Fix: Add Files: stanzas naming Katsura et al., Hu et al./PANGAEA, Takahashi et al. (and Morard for the author files) with License: CC-BY-4.0 and the full licence text or a pointer to a shipped copy, or exclude those files from the tarball.
important licensing 4. Files: debian/* stanza has an empty License field ◂

  • Files: debian/copyright:13-15

  • Basis: checked, in the package or with a reference tool

  • Evidence:

    Files: debian/*
Copyright: 2026, Roland Mas <lolando@debian.org>
License:

  • Problem: copyright-format 5.2 makes License a required field of a Files stanza and 6.7 requires its first line to be a short-name synopsis. As written the packaging files have no stated licence at all, so the copyright file is inaccurate for debian/*.

  • Fix: Put License: Expat in the stanza (the stand-alone Expat paragraph already follows).

important licensing 5. Installed data refer to licence notices that the repack removed ◂
  • Files: peritheos_build.py:249-255, peritheos/data/materials/fe3s.eosmat:366, peritheos/data/LICENSING.md:48,63-81, debian/copyright:5-7
  • Basis: checked, in the package or with a reference tool
  • Evidence: fe3s.eosmat:366: "pattern_license_notice": "datasets/calculated-patterns.LICENSE.md"; peritheos_build.py: the CIF/notice copy loop now runs pass; LICENSING.md links to 25 datasets/*.LICENSE.md notices; Files-Excluded: peritheos/data/datasets/*.
  • Problem: stage_core installs peritheos/data/LICENSING.md (the core guide) and eosmat/JSON files that point readers to datasets/*.LICENSE.md and datasets/cif-license-review.json, but neither the source tarball nor the binary contains them, because both the repack and patch 0003 drop them. The installed documentation therefore cannot state the terms of the data it ships, contrary to Policy 12.5.
  • Fix: Either ship the scoped notices (*.LICENSE.md, cif-license-review.json) as package data so the references resolve, or rewrite the shipped guide and eosmat notices so they are self-contained.
important packaging 6. The +ds1 repack leaves the research-evidence tree that upstream excludes from its own distributions ◂
  • Files: debian/copyright:5-7, pyproject.toml, output/cementite-eos-audit-2026-10-25/sources/takahashi-2019.pdf, output/cementite-eos-audit-2026-10-25/sources/minerals-630318-supplementary.xlsx, docs/data/fes-eosfit-version-audit/EoSFitanddisplay.html, docs/data/license-inventory/files.csv
  • Basis: checked, in the package or with a reference tool
  • Evidence: Files-Excluded: names only peritheos/data/datasets/* and peritheos/data/third_party/*, while pyproject.toml excludes output/**/sources/**, output/**/email-to-*, output/**/zotero-*, docs/data/fei-2007-gold-follow-up-sources/ye-2017-intercomparison.pdf ... with the comment Locally retrieved full texts and private correspondence are preserved in the review archive, not distributed as library or research fixtures.
  • Problem: The Debian source is a full repository snapshot including publisher PDFs, supplementary archives, EoSFit output and audit artifacts, which upstream itself does not distribute and which are the cause of the licensing findings above. +ds1 therefore removes too little, and the 32 MB tarball carries material neither the upstream sdist nor wheel contains.
  • Fix: Repack with Files-Excluded covering output/ and the docs/data research-evidence directories (at minimum everything pyproject.toml excludes), keeping only code, user documentation and the data needed to build and test.
important packaging 7. Licences of the statically linked Rust crates are absent from debian/copyright and the notice bundle was removed ◂
  • Files: debian/copyright, pyproject.toml:19-23, debian/patches/0005-Stop-referencing-data-third_party.patch, peritheos_build.py:215, deny.toml:8-13
  • Basis: checked, in the package or with a reference tool
  • Evidence: deny.toml allows Apache-2.0, BSD-2-Clause, MIT, Unicode-3.0; patch 0005 comments out peritheos/data/third_party/rust/**/* in license-files and shutil.copytree(root / "peritheos/data/third_party", ...); debian/copyright mentions only Expat and lists no crate.
  • Problem: The extension statically links pyo3, numpy, rand, serde/serde_json and rayon, whose licences include Apache-2.0, which requires the licence text (and any NOTICE) to accompany the binary. With the upstream Rust notice bundle excluded by the repack and nothing added to debian/copyright, the binary package carries no licence information for those components, contrary to Policy 12.5.
  • Fix: Restore/ship the upstream third_party/rust notice bundle under /usr/share/doc/python3-peritheos/, or list the crates and their licences in debian/copyright, referring to /usr/share/common-licenses/Apache-2.0 for Apache-2.0.
minor licensing 8. Upstream-Name is 'dioptas', not the packaged project ◂
  • Files: debian/copyright:2
  • Basis: checked, in the package or with a reference tool
  • Evidence: Upstream-Name: dioptas while Source: https://github.com/CPrescher/peritheos and Homepage in debian/control name peritheos.
  • Problem: The field misidentifies the upstream project (apparently copied from a Dioptas copyright file), so the file's upstream metadata is wrong.
  • Fix: Set Upstream-Name: peritheos.
minor packaging 9. No test suite is run: dh_auto_test is disabled and autopkgtest only imports the module ◂
  • Files: debian/rules:24, debian/control:9, debian/pybuild.testfiles
  • Basis: checked, in the package or with a reference tool
  • Evidence: debian/rules: override_dh_auto_test: with no commands; Testsuite: autopkgtest-pkg-python; /usr/share/autodep8/support/python/generate produces only Test-Command: ... $py -c "import peritheos; print(peritheos)" with Restrictions: ... superficial.
  • Problem: The package carries 300+ test modules and keeps pytest, jsonschema, matplotlib, Pillow, scipy and git in Build-Depends with <!nocheck>, but nothing ever executes them, and autopkgtest checks only that the module imports. Regressions in the data catalog or the Python API would not be detected before upload or migration.
  • Fix: Add a debian/tests/control running the test suite (with its dependencies) and either drop the unused build-time test dependencies or reason about the disabled dh_auto_test in the changelog.
minor packaging 10. Patch series lacks DEP-3 Description/Forwarded fields, numbers two patches 0003, and mixes an unrelated edit ◂
  • Files: debian/patches/series, debian/patches/0001-Update-versioned-deps.patch, debian/patches/0003-Port-to-current-rand-crate.patch, debian/patches/0003-Skip-shipping-datasets.patch, debian/patches/0004-Don-t-ship-Cargo.lock.patch, debian/patches/0005-Stop-referencing-data-third_party.patch, peritheos_build.py:249-255
  • Basis: checked, in the package or with a reference tool
  • Evidence: Patch headers contain only From:, Date:, Subject:; series lists 0003-Port-to-current-rand-crate.patch and 0003-Skip-shipping-datasets.patch; the latter also rewrites an unrelated f-string (f''' to f""") and leaves for name in (...): pass in peritheos_build.py.
  • Problem: Without Description:/Forwarded: the purpose and upstream status of each patch is unrecorded, which is the DEP-3 minimum for a quilt series; duplicate numbering makes the intended order ambiguous, and the unrelated quote change plus the now-dead loop make the patch harder to review and forward.
  • Fix: Add DEP-3 Description and Forwarded: not-needed (or the upstream URL) fields, renumber the patches uniquely, and split out the unrelated edit and delete the emptied loop.
Verified ◂
  • Read all of debian/: control, rules, copyright, changelog, clean, watch (not reviewed), pybuild.testfiles, salsa-ci.yml, source/format, upstream/metadata, patches/series and every patch; there is no debian/tests directory.
  • Files-Excluded matches the tree: peritheos/data/datasets/ and peritheos/data/third_party/ are absent, and no file excluded there is present.
  • Code licensing: LICENSE is MIT/Expat (c) 2026 Clemens Prescher; the Python modules, the Rust crates (Cargo.toml license = "MIT"), scripts/, tests/, benchmarks/, curation/, packages/ and the contributor-written Markdown/MkDocs docs are covered by it, so the Files: * Expat grant is right for them.
  • output/dewaele-2008-ruby-construction/dewaele-2008-ruby-construction-numerical.zip is a Peritheos-generated bundle (members bundle-manifest.json, docs/, output/, peritheos/, scripts/), MIT material.
  • output/dewaele-2008-ruby-construction/source-reconstruction/recovered-source-reconstruction.zip is a Peritheos-generated bundle (members docs/, output/, scripts/), MIT material.
  • output/dewaele-2008-ruby-construction/upstream-recovery-numerical.zip is a Peritheos-generated bundle of the same kind (docs/, output/, scripts/), MIT material.
  • docs/data/brucite-ambient-comparison.pdf is matplotlib plot output from scripts/brucite_ambient_comparison.py, with brucite-ambient-comparison.json and .png beside it.
  • docs/data/brucite-continuous-comparison.pdf is matplotlib plot output of the same brucite series, with its .json and .png beside it and the generating code in scripts/brucite_*.py.
  • docs/data/brucite-joint-pv-errors.pdf is matplotlib plot output from scripts/brucite_joint_pv_errors.py, with its .json and .png beside it.
  • docs/data/brucite-mgd-comparison.pdf is matplotlib plot output from scripts/brucite_mgd_comparison.py, with its .json and .png beside it.
  • docs/data/brucite-quadratic-moduli.pdf is matplotlib plot output from scripts/brucite_quadratic_pv_errors.py, with the brucite .json/.png inputs in docs/data/.
  • docs/data/brucite-quadratic-pv-errors.pdf is matplotlib plot output from scripts/brucite_quadratic_pv_errors.py, with its .json and .png beside it.
  • docs/data/brucite-staged-comparison.pdf is matplotlib plot output from scripts/brucite_staged_comparison.py, with its .json and .png beside it.
  • docs/data/brucite-staged-continuous.pdf is matplotlib plot output from scripts/brucite_staged_continuous.py, with its .json and .png beside it.
  • docs/data/brucite-staged-moduli.pdf is matplotlib plot output from the same brucite staged scripts, with the .json/.png inputs in docs/data/.
  • docs/data/fei-2007-platinum-fit-comparison.pdf is matplotlib plot output, with fei-2007-platinum-fit-comparison.csv and .png beside it and the generating scripts/*fei* code in the tree.
  • docs/data/yokoo-2009-gold-thermal-reconstruction.pdf is a plot PDF with the corresponding JSON reconstruction beside it and the generating scripts in scripts/; it is plot output, not source artwork.
  • docs/data/license-inventory/catalog-components.csv is Peritheos-generated licence inventory metadata (per-file/licence statements; MIT by the contributors), not licensed third-party content.
  • docs/data/license-inventory/rights-statements.csv is Peritheos-generated licence inventory metadata recording source-licence declarations; the quoted CC BY-NC/ND strings are records of source terms.
  • docs/data/numerical-redistribution-review.json is a Peritheos-generated review record (decisions, hashes, limitations); its CC BY-NC strings record source terms, not a grant for the file.
  • docs/data/restricted-source-numerical-review.json is the machine-readable receipt behind docs/research/restricted-source-numerical-review.md; it records, and does not license, the restricted source data.
  • docs/literature-reproductions/ismailova-2016-fe-bridgmanite.md is contributor-written prose (MIT) that records the source article as CC BY-NC 4.0 and states the source is not redistributed.
  • docs/literature-reproductions/ma-2024-kcl.md is contributor-written prose (MIT) recording the publisher licence of the source and that the supplement is not distributed.
  • docs/literature-reproductions/sakai-2025-gold.md is contributor-written prose (MIT) recording the source's CC BY-NC-ND terms and the scoped contributor CC0.
  • docs/literature-reproductions/tranche-b-mineral-eos-audit.md is contributor-written prose (MIT) describing the audit and the sources' licences.
  • docs/research/calculated-reference-patterns.md is contributor-written documentation (MIT) about independently calculated patterns.
  • docs/research/license-inventory.md is contributor-written documentation (MIT) of the licence inventory; its CC BY-NC/ND mentions are source licences.
  • docs/research/numerical-dataset-redistribution.md is contributor-written documentation (MIT) of the redistribution review; its CC BY-NC-ND mentions are source licences.
  • docs/research/restricted-source-numerical-review.md is contributor-written documentation (MIT) of the Sakai/Ismailova/Anzellini review; it explicitly states the review is not a redistribution clearance.
  • tests/test_ismailova_2016_fe_bridgmanite.py is contributor-written test code (MIT) asserting the recorded CC BY-NC 4.0 metadata string; the string is test data, not a licence of the test.
  • tests/test_license_inventory.py is contributor-written test code (MIT) exercising the licence-inventory classifier with CC BY-NC 4.0/CC0-1.0 sample strings.
  • tests/test_restricted_source_redistribution.py is contributor-written test code (MIT) checking the recorded restricted-source declarations.
  • Copyright-holder scan: RJA-JGP-MA-MLM in docs/data/fes-eosfit-version-audit/* is a real holder and is reported; the American Institute of Physics, Japan Association of Mineralogical Sciences and The Mineralogical Society strings are source-licence metadata inside generated JSON/CSV and the e_feooh transcription (covered above); |SPDX-License-Identifier|dual licensed|licensed under is a list of marker words in scripts/generate_rust_notices.py:77, not a holder.
  • output/cementite-eos-audit-2026-10-25/sources/takahashi-2019.pdf is the published MDPI Minerals article (CC BY 4.0); output/cementite-eos-audit-2026-10-25/sources/minerals-09-00744-s001.zip and output/cementite-eos-audit-2026-10-25/sources/minerals-630318-supplementary.xlsx are publisher supplementary files of the same audit (licence not recorded for the latter).
  • docs/data/forsterite-katsura-2022-sources/forsterite-katsura-2022-source.xlsx is Katsura's published workbook, marked open_source_declared/CC-BY-4.0 in the inventory.
  • peritheos/data/research/cementite/hu-2019-pangaea-table1.xlsx is the PANGAEA Hu et al. shock table, marked open_source_declared/CC-BY-4.0 in the inventory.
  • output/pdf/speziale-2001-mgo-calculation-note.pdf has its .tex source beside it; output/pdf/shen-smith-2026-mgo-nacl-b2-comparison.pdf has its .json input and .svg/.png beside it.
  • output/pdf/farla-2025-eos-reproduction-note.pdf is contributor-written comparison prose; the EoSFit run manifests and JSON inputs it reports are in docs/data/rubidium-halides-farla-2025-case3-eosfit7c/ and docs/data/rubidium-halides-farla-2025-follow-up.json.
  • Policy/reference checks made with the tools: Policy 4.7.4.1 is current (Standards-Version 4.7.4 is fine), Policy 12.5 requires the distribution licences in the binary's copyright file, copyright-format 5.2/6.7 require the License field and its synopsis, pybuild(1) documents debian/pybuild.testfiles as overriding the default pyproject.toml/pytest.ini/tests copy, and autodep8's pkg-python generator yields only an import test.
  • Build inputs: librust-rand-dev in the archive is 0.10.3 and librust-numpy-dev is 0.28.0, matching patches 0001/0003; the maturin/dh-cargo wiring and compat 13 substvars (${misc:Depends}, ${python3:Depends}, ${shlibs:Depends}) look otherwise conventional.
  • uscan found the packaged version as the newest upstream release (upstream 0.18.0, packaged 0.18.0+ds1).
Not confirmed ◂
  • Binary-only contents were judged from the source and the build backend: peritheos_build.stage_core stages eosmat without their inline rows and without the CIF files, so I did not see the installed wheel; whether maturin's license-files globs that now match nothing warn or fail was not tested (no build possible).
  • output/cementite-eos-audit-2026-10-25/sources/minerals-630318-supplementary.xlsx merely sits in the same publisher-material directory as the CC BY 4.0 Takahashi article; its own licence is recorded nowhere in the package, so its terms could not be confirmed.
  • The MATLAB sources under docs/data/forsterite-katsura-2022-sources/ are not valid UTF-8 and were not read; their licence was taken from peritheos/data/LICENSING.md and the inventory row.
  • One file is larger than 4 MiB and was only partly scanned; I did not read the multi-megabyte generated inventories (docs/data/license-inventory/files.csv, docs/data/license-inventory/catalog-components.csv, output/eos-recommendation-audit-2026-10-17/before-implementation/published-fields.json) in full, only the rows the searches returned.
  • No generator or source file could be found for output/pdf/farla-2025-eos-reproduction-note.pdf; it reads as a contributor-authored note (MIT) built from the case-3 manifests, but its production source is not in the tree.
  • Whether the 300+ test modules pass against the repacked tree (the optional peritheos-datasets data is absent) could not be checked; no peritheos-datasets binary package is built, so runtime dataset access only raises the 'install peritheos-datasets' error.
  • Binary images (PNG/SVG) and the xlsx internals were not opened; no fonts or executables are shipped outside the listed artifacts.
  • What these files are. The scan made before the review picked them out (built files, minified code, archives, licence wording that is rarely free, or licences that are not accepted), and this report does not mention them: docs/data/license-inventory-scopes.json:67 (a Creative Commons NonCommercial or NoDerivatives licence); output/eosmat-structure-review-2026-10-17/gold-same-information.eosmat:2813 (a Creative Commons NonCommercial or NoDerivatives licence); scripts/inventory_distribution_licenses.py:87 (a Creative Commons NonCommercial or NoDerivatives licence).
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader rejected this upload in response to the review.

Review Information

rejected — allocated to dfsg-uploader 0 hours ago, started 0 hours ago, completed 0 hours ago.

Final Comment

The uploader rejected this upload in response to the automated (LLM) review of it, so that they can fix the problems it found and upload again.

Back to Dashboard | View all reviews for this package