• Full inventory of the 15-file tree: Cargo.toml, Cargo.toml.orig, Cargo.lock, .cargo_vcs_info.json, LICENSE, README.md, src/{lib,color,error,util}.rs, src/helpers/{ffmpeg,ffms2,frame_builder,vapoursynth,y4m}.rs. .pc/ and debian/cargo-checksum.json were left out of every search and not read.
• The prescan's list of files to account for is empty apart from its author check, which reported every holder found named in debian/copyright; nothing remains unaccounted for.
• Only one copyright notice exists in the tree: LICENSE:1-2 The MIT License (MIT) / Copyright (c) 2025 Joshua Holmer, matched by Files: *. A case-insensitive grep of the whole tree for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU General Public, GNU Lesser, Apache License, Mozilla Public, public domain, All rights reserved, MIT License, LGPL and GPL found no other notice.
• README.md:227 (This project is licensed under the MIT License) and Cargo.toml's license = "MIT" agree with the Expat short name; the full MIT permission notice is reproduced in the stand-alone License: Expat paragraph, as that licence requires.
• debian/copyright patterns work as intended: Files: * is the catch-all and the later Files: debian/* paragraph overrides it for all packaging files including debian/patches/.
• debian/copyright.debcargo.hint still contains debcargo's placeholders (FIXME (overlay) UNKNOWN-AUTHORS, UNKNOWN-LICENSE; FIXME (overlay)), but it is debcargo's input file under debian/, covered by the debian/* stanza, and is not installed into the binary package; the delivered debian/copyright has resolved those placeholders.
• Patches bring in no third-party work: drop-criterion.patch removes a dev-dependency and auto/auto-remove-features.patch is debcargo's generated feature removal; both only touch Cargo.toml. No file in the tree is a built artifact, minified code, PDF, font, archive or other binary.
• src/helpers/ffms2.rs:1008 copies test_files/tt_sif.y4m, which is not part of the crate; helpers::ffms2 is compiled only under the removed ffms2 feature (src/lib.rs:38-39), so neither the build nor autopkgtest compiles that test.
• debhelper 14.5's compat checklist confirms that from compat 13 dh skips all override and hook targets of dh_auto_test, dh_dwz and dh_strip under nocheck/nostrip, so override_dh_auto_test with dh_auto_test -- test --all is consistent with the <!nocheck> Rust build dependencies; dh-cargo's build step only copies sources, compilation happening in the test step.
• Standards-Version: 4.7.4 against Policy 4.7.4.1 — same first two components, current enough; Section: rust, Multi-Arch: same, Provides, Vcs-Git/Vcs-Browser, Homepage and the changelog (0.12.0-1, unstable, urgency medium) are consistent with each other and with debian/upstream/metadata.
• Other declared dependencies exist and satisfy their version constraints: librust-num-rational-dev 0.4.2-1+b1, librust-thiserror-dev 2.0.21-1, librust-y4m-dev 0.8.0-2, rustc 1.97.1 (unstable) / 1.98.1~exp1, dh-cargo 34 (provides dh-sequence-cargo); Breaks: rustc (<< 1.95~) is satisfied by both rustc versions.
• Cargo.lock in the source is deleted before building by dh-cargo (rm_files("Cargo.lock") in cargo.pm) and therefore never shipped.
• uscan found the packaged version as the newest upstream release (upstream 0.12.0, packaged 0.12.0).

• Whether the crate really needs v_frame 0.7 rather than Debian's 0.3.9 — i.e. whether relaxing the requirement would compile — could not be checked: no v_frame source is installed here and nothing in the package can be built or run.
• The apt lists are a snapshot some days old; librust-v-frame-0.7+default-dev would appear after a separate rust-v-frame 0.7 upload, so the finding rests on the archive as of the review date.

None.