Review: rust-anstyle-progress 0.1.4-1

Package Information

Description	ANSI escape code progress reporting (OSC 9;4) - Rust source code Source code for Debianized Rust crate "anstyle-progress"
Maintainer	Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed By	Simon Quigley <tsimonq2@debian.org>
Sponsor	tsimonq2@debian.org
Distribution	unstable
Architecture	any
VCS	git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/anstyle-progress] (browse)
Tracker	https://tracker.debian.org/pkg/rust-anstyle-progress
Uploaded	28 days ago

New Package Report

.changes◂

Version	0.1.4-1
Changed-By	Simon Quigley <tsimonq2@debian.org>
Architecture	source amd64
Distribution	unstable
Date	Sat, 10 Oct 2026 07:58:43 -0500
Source	rust-anstyle-progress

Changelog◂

rust-anstyle-progress (0.1.4-1) unstable; urgency=medium
 .
   * Package anstyle-progress 0.1.4 from crates.io using debcargo 2.8.4

.dsc◂

Priority	optional
Component	main
Package-List	librust-anstyle-progress-dev deb rust optional arch=any
Section	rust

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: anstyle-progress
Upstream-Contact: Ed Page <eopage@gmail.com>
Source: https://github.com/rust-cli/anstyle.git

Files: *
Copyright:
 2026 Ed Page <eopage@gmail.com>
 2026 Andrew Gunnerson <accounts+github@chiller3.com>
 2026 Daniel Scherzer <daniel.e.scherzer@gmail.com>
 Individual contributors
License: Expat or Apache-2.0
Comment:
 Named holders are the git authors of crates/anstyle-progress.
 LICENSE-MIT reads "Copyright (c) Individual contributors".

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: Expat or Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 24 days ago.

Report◂

DFSG NEW review for rust-anstyle-progress version 0.1.4-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable

Licensing

Upstream is dual-licensed MIT (Expat) or Apache-2.0, both DFSG-free and compatible; the tree carries exactly the two expected licence files (LICENSE-MIT, LICENSE-APACHE) and no other licence or copyright notice, no non-free terms, no binaries, minified code, fonts, images or generated artefacts. debian/copyright is machine-readable DEP-5 with the canonical Format URL, a Files: * stanza covering every upstream file and a debian/* stanza, correct short names (Expat or Apache-2.0), the full Expat text reproduced verbatim as required, and Apache-2.0 referred to /usr/share/common-licenses. No Files-Excluded is needed: the tarball is the unmodified crates.io release and matches the unpacked tree file for file.

Packaging

Textbook debcargo-generated packaging: debhelper-compat 13 with dh-sequence-cargo and dh $@ --buildsystem cargo, source format 3.0 (quilt), a single DEP-3 patch whose purpose (relaxing the snapbox dev-dependency to the version Debian ships) is clear and consistent with the autopkgtest dependency, a four-stanza autopkgtest suite with resolvable dependencies, Standards-Version 4.7.4 (current), sane Vcs-/Homepage, and a clean 0.1.4-1 unstable changelog. Architecture, Multi-Arch and the Provides/Breaks set follow the librust--dev convention; there are no maintainer scripts and no file dh references that is missing from the tree.

Issues

None.

Verified ◂

Inventory: the upstream tree is Cargo.toml, Cargo.toml.orig, Cargo.lock, .cargo_vcs_info.json, LICENSE-APACHE, LICENSE-MIT, README.md and src/{lib,progress,query}.rs; rust-anstyle-progress_0.1.4.orig.tar.gz lists exactly the same set under anstyle-progress-0.1.4/, so the orig tarball is the pristine crates.io release and nothing outside debian/ was added or removed; rust-anstyle-progress_0.1.4-1.debian.tar.xz contains only the expected debian/ files (no .pc, no debian/tests scripts, no maintainer scripts).
Cargo.toml declares license = "MIT OR Apache-2.0", README.md says "Licensed under either of Apache License, Version 2.0 ... MIT license ... at your option"; LICENSE-MIT is the Expat text (Copyright (c) Individual contributors), LICENSE-APACHE is the complete 202-line Apache 2.0 text ending in the appendix boilerplate; src/*.rs carry no licence or copyright header at all.
Whole-tree grep (gitignore false) for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU General Public, GNU Lesser, Apache License, Mozilla Public, public domain, All rights reserved found matches only in LICENSE-MIT, LICENSE-APACHE, README.md and debian/copyright*: no other licence, holder or non-free clause anywhere.
debian/copyright: DEP-5 with the exact canonical Format URL, Upstream-Name/Upstream-Contact/Source, Files: * (all upstream files) and Files: debian/* (which covers every file in the Debian tarball, including copyright.debcargo.hint, debcargo.toml and patches), one stand-alone License paragraph per short name; the Expat paragraph reproduces the MIT/Expat text verbatim, matching LICENSE-MIT, and Apache-2.0 points at /usr/share/common-licenses/Apache-2.0. "Expat" is the short name the copyright-format spec prescribes for this text, so "Expat or Apache-2.0" names the licence correctly.
packaging: debian/control has debhelper-compat (= 13) + dh-sequence-cargo, Build-Depends-Arch for cargo/rustc (>= 1.66.0)/libstd-rust-dev with <!nocheck> matching rust-version 1.66.0 and Breaks: rustc (<< 1.66.0~); Standards-Version 4.7.4 is the installed Policy version (4.7.4.1); Vcs-Git/Vcs-Browser point at debcargo-conf [src/anstyle-progress]; changelog is 0.1.4-1, unstable, urgency medium, dated Sat, 10 Oct 2026 (a Saturday), one entry for the new package.
patches: series lists one patch, relax-deps.patch, with DEP-3 headers (Author, Origin: vendor, Forwarded: not-needed, Last-Update) changing Cargo.toml's snapbox dev-dependency from "0.6.23" to ">= 0.6.21, < 0.7"; consistent with debian/tests/control depending on librust-snapbox-0.6+default-dev (>= 0.6.21) and with apt-cache showing librust-snapbox-dev 0.6.21-1+b1 provides it; Cargo.lock's 0.6.23 pin is not a problem because dh-cargo's Buildsystem/cargo.pm removes Cargo.lock in its configure step.
tests: debian/tests/control has four cargo-auto-test stanzas (all-features, default, --no-default-features --features std, --no-default-features) with @ as the dependency placeholder (autopkgtest spec) and allow-stderr; nothing in the packaging is referenced by debian/rules or the tests that is absent from the tree, and dh-cargo's sequence only adds dh_clean -XCargo.toml.orig, so no cargo:*-substvars are expected in Depends.
uscan found the packaged version as the newest upstream release (upstream 0.1.4, packaged 0.1.4).

Not confirmed ◂

The three holders named for Files: * (Ed Page, Andrew Gunnerson, Daniel Scherzer) and the year 2026 come from the packaging, not from the tree: no file in the crate names them, and LICENSE-MIT says only Copyright (c) Individual contributors. The upstream git history (commit f23f732442504b49f5c735accc41b8b293a5d6ea per .cargo_vcs_info.json) is not available here (no network, no git), so the holders and years could not be verified; a wrong or missing holder would be a real defect.
debian/cargo-checksum.json is 54 bytes and holds no checksums ({"package":"Could not get crate checksum","files":{}}), unlike the usual debcargo output; dh-cargo's Buildsystem/cargo.pm copies it to .cargo-checksum.json in the build tree, so cargo's per-file verification of this crate's sources is effectively skipped. I believe this is harmless (the root package is a path package and Cargo.lock is deleted at configure time), but a build would show whether the empty checksum file matters.
No build or test run was possible here, so the rustc/snapbox versions and the riscv64 architecture restriction on two test stanzas were judged only from the control files.

Proposed changes ◂

None.

Review Information

accepted — allocated to awm 23 days ago, started 23 days ago, completed 23 days ago.

Final Comment

Back to Dashboard | View all reviews for this package