DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-async-wsocket 0.17.0-1

Package Information

DescriptionWebSocket convenience library - Rust source code

Convenience library for using websockets in native environments! In Debian, we disabled the WASM environments for this package. Source code for Debianized Rust crate "async-wsocket"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Sponsorpaulliu@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/async-wsocket] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-async-wsocket
Uploaded3 hours ago

New Package Report

.changes◂
Version0.17.0-1
Changed-ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Architectureamd64 source
Distributionunstable
Sourcerust-async-wsocket
Changelog◂
rust-async-wsocket (0.17.0-1) unstable; urgency=medium
 .
   * Package async-wsocket 0.17.0 from crates.io using debcargo 2.8.3
.dsc◂
Componentmain
Package-Listlibrust-async-wsocket-dev deb rust optional arch=any
Sectionrust
Priorityoptional
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: async-wsocket
Upstream-Contact: Yuki Kishimoto <yukikishimoto@protonmail.com>
Source: https://github.com/yukibtc/async-wsocket.git

Files: *
Copyright: 2022-2024 Yuki Kishimoto <yukikishimoto@protonmail.com>
License: MIT

Files: src/wasm/*
Copyright:
 2019-2022 Naja Melan
 2023-2024 Yuki Kishimoto Yuki Kishimoto <yukikishimoto@protonmail.com>
License: MIT

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
License: MIT

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-async-wsocket version 0.17.0-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 with the canonical Format: URL; Files: * (MIT, 2022-2024 Yuki Kishimoto) covers every upstream file, and the later src/wasm/* stanza correctly adds Naja Melan's 2019-2022 copyright, which each of those six files states in its header. The full MIT text is present as the stand-alone License: MIT paragraph, as it is not in /usr/share/common-licenses. A grep of the whole tree for Copyright/(C)/©/SPDX/GPL/LGPL/Apache/MPL/public domain/All rights reserved found no other licence statement and no non-free wording, and the tree holds no binaries, images, fonts, PDFs or generated/minified code. The only blemish, too cosmetic to report as an issue, is the duplicated given name in the src/wasm/* stanza's second copyright line (2023-2024 Yuki Kishimoto Yuki Kishimoto <...>).

Packaging

Straight debcargo 2.8.3 output: compat 13 with dh-sequence-cargo, a minimal dh $@ --buildsystem cargo, Architecture: any + Multi-Arch: same, feature Provides as the Rust team does, autopkgtests for default, all-features and each feature, Standards-Version: 4.7.4 (current against Policy 4.7.4.1), sane unstable changelog, and Vcs-*/Homepage fields that match the crate. The three patches are explained, carry DEP-3 headers with Forwarded: not-needed, and are consistent with the applied Cargo.toml; the wasm32 dependency removal does not affect the native build because src/lib.rs gates pub mod wasm on cfg(target_arch = "wasm32"). Every build dependency except one (see Not confirmed) resolves in the archive, and dh-cargo's configure removes the upstream Cargo.lock, so the stale lockfile cannot break an offline build.

Issues

None.

Verified ◂
  • Read every non-debian/ file in the tree (26 files, .pc/ skipped): LICENSE, README.md, Cargo.toml, Cargo.toml.orig, Cargo.lock, .cargo_vcs_info.json, .gitignore, justfile, rust-toolchain.toml, rustfmt.toml, .github/dependabot.yml, .github/workflows/ci.yml, examples/client.rs, src/*.rs and src/{native,wasm}/*.rs.
  • LICENSE is the MIT text headed Copyright (c) 2022-2024 Yuki Kishimoto, identical to the Files: * holder and to the stand-alone License: MIT paragraph in debian/copyright.
  • Each of src/wasm/{error,event,message,mod,state,stream}.rs begins Copyright (c) 2019-2022 Naja Melan / Copyright (c) 2023-2024 Yuki Kishimoto / Distributed under the MIT software license; the src/wasm/* stanza matches, and the pre-review author check likewise found every holder named.
  • Every other source file (src/lib.rs, src/message.rs, src/prelude.rs, src/socket.rs, src/native/{error,mod,socks}.rs, examples/client.rs) carries Copyright (c) 2022-2024 Yuki Kishimoto and Distributed under the MIT software license; README.md ends with the same MIT statement.
  • A tree-wide grep for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU General Public, GNU Lesser, Apache License, Mozilla Public, public domain and All rights reserved found only the notices above; no non-commercial, no-modification or field-of-use terms anywhere.
  • No binaries, images, fonts, sounds, PDFs, minified JavaScript or generated code in the tree; the config files (.github/, justfile, rust-toolchain.toml, rustfmt.toml, .gitignore, .cargo_vcs_info.json) contain no code of unclear provenance.
  • Cargo.lock is upstream's published lockfile, not a Debian artifact: the same file (including the wasm32-only crates) is a member of rust-async-wsocket_0.17.0.orig.tar.gz, and dh-cargo deletes it in its configure step (rm_files("Cargo.lock") in /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm).
  • The orig tarball is unrepacked (checked members Cargo.lock and .github/workflows/ci.yml against the tree), so no Files-Excluded is needed.
  • Patches: debian/patches/auto/auto-remove-features.patch (debcargo, removes aws_lc_rs, native-tls-vendored, rustls-tls-webpki-roots), 0001-remove-wasm32-only-deps.patch and 0002-default-tls-native-roots.patch; read all three, and the resulting Cargo.toml (default = ["ring", "rustls-tls-native-roots"], no wasm32 dependency sections) matches the series applied in order.
  • src/lib.rs has #[cfg(target_arch = "wasm32")] pub mod wasm;, so patch 0001 dropping the wasm32 dependencies leaves the native build untouched; src/native/mod.rs uses tokio_happy_eyeballs::connect unconditionally.
  • debian/ read in full: control, rules, changelog, source/format (3.0 (quilt)), tests/control, debcargo.toml, copyright, copyright.debcargo.hint, patches/series and all patches; no maintainer scripts, .install, .links, .dirs or upstream/metadata.
  • Dependencies checked with the apt-cache tool: librust-url-2-dev 2.5.8, librust-tokio-1 1.53.2, librust-futures-util-0.3 0.3.34, librust-tokio-rustls-0.26 0.26.6 and librust-tokio-tungstenite-0.28 0.28.0 provide all the +feature names used in debian/control, and dh-cargo 34 satisfies (>= 33~) in debian/tests/control.
  • Standards-Version: 4.7.4 matches the reviewing system's Policy 4.7.4.1 in its first two components; debhelper-compat (= 13) with dh-sequence-cargo is current Rust-team practice.
  • Non-default feature dependencies (+native-tls, +socks) appear in the binary's Depends but not in Build-Depends-Arch; that is consistent, since the build only compiles the default features and autopkgtest installs the binary package with its Depends.
  • uscan found the packaged version as the newest upstream release (upstream 0.17.0, packaged 0.17.0).
Not confirmed ◂
  • librust-tokio-happy-eyeballs-0.1+default-dev (debian/control:12 and :35) is provided by nothing in the unstable or experimental lists and is not among the binaries of any upload in the NEW queue as of 2026-11-05T13:04Z; Cargo.lock confirms it is a mandatory dependency of async-wsocket 0.17.0 (version 0.1.0, no feature gate). If that crate is not accepted alongside this upload, the source cannot be built and librust-async-wsocket-dev cannot be installed; the tool warns the lists may be some days old, so no issue is claimed.
  • No build or autopkgtest run was possible in this read-only review; the offline-build and test behaviour of the patched Cargo.toml is taken as given.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package