DFSG NEW Queue

DFSG, Licensing & New Packages Team

python-sigimax 1.0.2-1

Package Information

DescriptionGUI components for signal and image processing

SigimaX is an open-source Python framework for building Qt-based scientific desktop applications. It provides a reusable application skeleton — main window, configuration system, embedded widgets, and HDF5 infrastructure — so that developers can focus on domain-specific features.

MaintainerDebian PaN Maintainers <debian-pan-maintainers@alioth-lists.debian.net>
Changed ByRoland Mas <lolando@debian.org>
Sponsorlolando@debian.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/python-team/packages/python-sigimax.git (browse)
Trackerhttps://tracker.debian.org/pkg/python-sigimax
Uploaded2 hours ago

New Package Report

.changes◂
DateTue, 20 Oct 2026 17:47:03 +0200
Sourcepython-sigimax
Version1.0.2-1
Changed-ByRoland Mas <lolando@debian.org>
Architecturesource all
Distributionunstable
Changelog◂
python-sigimax (1.0.2-1) unstable; urgency=low
 .
   * Initial packaging.
.dsc◂
Componentmain
Package-Listpython3-sigimax deb python optional arch=all
Sectionpython
Priorityoptional
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: sigimax
Upstream-Contact: Pierre Raybaut <p.raybaut@codra.fr>
Source: https://github.com/DataLab-Platform/SigimaX

Files: *
Copyright: 2023, DataLab Platform Developers
License: BSD-3-clause

Files: debian/*
Copyright: 2026 Roland Mas <lolando@debian.org>
License: BSD-3-clause

License: BSD-3-clause
 Copyright (c) 2023, DataLab Platform Developers.
 All rights reserved.
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice, this
    list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.
 .
 3. Neither the name of the copyright holder nor the names of its
    contributors may be used to endorse or promote products derived from
    this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 2 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for python-sigimax version 1.0.2-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: No
  • Issues: 0 blocker, 2 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The sources are uniformly under the BSD 3-Clause license held by the DataLab Platform Developers; no other license, no non-free terms, no vendored third-party code, no built/minified/bytecode files. debian/copyright is in machine-readable (DEP-5/1.0) format, its Files: * catch-all plus a debian/* stanza cover every file, the single copyright holder is accurately named, and the full BSD-3-clause text is included verbatim. All copyright holders the pre-scan found are named in debian/copyright.

Packaging

The packaging is good in structure (compat 14, proper dh/pybuild use, clean split, sane control fields, Standards-Version 4.7.4) but has two dependency problems a sponsor would want fixed before upload: python3-psutil — imported by runtime code and by two test modules — is missing from Build-Depends, and Debian's shipped versions of python3-guidata (3.14.2) and python3-plotpy (2.8.4) are below the upstream minimums (guidata >= 3.15.0, PlotPy >= 2.11.0) required by pyproject.toml.

Issues

1. [important] [packaging] python3-psutil missing from Build-Depends though imported by runtime and test code

  • Files: debian/control, sigimax/widgets/status.py:18, sigimax/tests/widgets/test_memstatus.py:9, sigimax/tests/hdf5/_h5browser_memoryleak.py:16
  • Basis: inferred from what was read, not seen directly
  • Evidence: import psutil in sigimax/widgets/status.py (installed code) and in the two test files; Build-Depends in debian/control lists python3-plotpy <!nocheck> and python3-sigima <!nocheck> but no python3-psutil.
  • Problem: The pytest suite runs during the package build (dh_auto_test via dh-sequence-python3; pyproject addopts collect the whole sigimax tree). psutil is neither in Build-Depends nor pulled in transitively (python3-guidata/plotpy/sigima do not depend on it), so the build-time test run would fail with a ModuleNotFoundError; it is also a genuine runtime dependency (status.py) that should be an unconditional Build-Depends.
  • Fix: Add python3-psutil to Build-Depends (at least <!nocheck> alongside the other test/runtime deps).

2. [important] [packaging] Debian's guidata and plotpy are older than the upstream minimum versions sigimax requires

  • Files: pyproject.toml, debian/control
  • Basis: checked, in the package or with a reference tool
  • Evidence: pyproject.toml dependencies = ["guidata >= 3.15.0", "PlotPy >= 2.11.0", "psutil >= 5.7", "Sigima >= 1.2.0"]; archive has python3-guidata 3.14.2-2 and python3-plotpy 2.8.4-2 (python3-sigima 1.2.0-1 and python3-psutil are fine).
  • Problem: With no PyDist override (no debian/*.pydist, no PEP440 flag), dh-python generates unversioned Depends, so python3-sigimax would install against guidata 3.14.2 / plotpy 2.8.4, which are below the versions the upstream code was developed and tested against — a likely runtime incompatibility. A sponsor should confirm the package works with the Debian versions actually in the archive (or that guidata/plotpy uploads at the required versions are imminent).
  • Fix: Either verify and document compatibility with the archived guidata/plotpy versions, use versioned Depends / a pydist file reflecting the real minimums, or coordinate the dependent library uploads first.

Verified

  • debian/copyright read in full: machine-readable DEP-5/1.0 format with Format: 1.0 URL, a Files: * paragraph and a debian/* paragraph, one stand-alone License: BSD-3-clause paragraph reproducing the full license text; no Files-Excluded needed.
  • All 217 scanned files' copyright holders are named in debian/copyright (the pre-scan author check reports 'every holder found is named'); the sole holder is 'DataLab Platform Developers'.
  • Every .py source file that carries a notice has the header Copyright (c) DataLab Platform Developers, BSD 3-Clause license, see LICENSE file.; translation .po files say distributed under the same license as the SigimaX package; LICENSE is the BSD 3-Clause text matching the debian/copyright paragraph verbatim.
  • No other license text found anywhere in the tree: grep for GPL/LGPL/Apache/MIT/Mozilla/public domain/non-commercial/Good-not-Evil returned only the BSD notices; the licence is DFSG-compliant.
  • No vendored third-party code, no minified JS/CSS, no bytecode, no .jar/.class/.so/.dll/.exe: preferred form of modification is present (all Python source).
  • Binary test data sigimax/data/tests/empty.h5 and reordering_test.h5 are HDF5 fixtures; SVG/PNG image files (doc/_static/, doc/images/, sigimax/data/icons/*) are project assets with no embedded third-party copyright/lice privileges; organisation logos (cea.svg, codra.svg, nlnet.svg) are shown as credits/acknowledgements in doc/index.rst and carry no non-free terms.
  • Two small upstream dev scripts (scripts/ci_release_helpers.py, scripts/reinstall_dev.py) have no per-file header but are covered by the Files: * project BSD-3-clause licence.
  • Packaging: compat 14 via debhelper-compat, dh $@ --buildsystem=pybuild with dh-sequence-python3, Architecture all (pure Python), Standards-Version 4.7.4 (current), Signals-Tests field Testsuite: autopkgtest-pkg-pybuild with pybuild.testfiles=sigimax/tests, sane Vcs-* fields, changelog 1.0.2-1 unstable.
  • Runtime dependencies map correctly to Debian packages: dh-python's cpython3_fallback maps guidata->python3-guidata, psutil->python3-psutil, plotpy->python3-plotpy, sigima->python3-sigima, all present in the archive.
  • uscan found the packaged version as the newest upstream release (upstream 1.0.2, packaged 1.0.2).

Not confirmed

  • Whether the package actually functions at runtime against Debian's older python3-guidata 3.14.2 and python3-plotpy 2.8.4 (below the upstream minimums) could not be verified here without building/running.
  • Whether the build-time pytest run fails without python3-psutil is reasoned from the imports and Build-Depends contents, not observed.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package