Review: rust-cargo-util-terminal 0.1.1-1

Package Information

Description	Cargo's terminal rendering - Rust source code Source code for Debianized Rust crate "cargo-util-terminal"
Maintainer	Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed By	Simon Quigley <tsimonq2@debian.org>
Sponsor	tsimonq2@debian.org
Distribution	unstable
Architecture	any
VCS	git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/cargo-util-terminal] (browse)
Tracker	https://tracker.debian.org/pkg/rust-cargo-util-terminal
Uploaded	28 days ago

New Package Report

.changes◂

Changed-By	Simon Quigley <tsimonq2@debian.org>
Architecture	source amd64
Distribution	unstable
Date	Sat, 10 Oct 2026 08:13:48 -0500
Source	rust-cargo-util-terminal
Version	0.1.1-1

Changelog◂

rust-cargo-util-terminal (0.1.1-1) unstable; urgency=medium
 .
   * Package cargo-util-terminal 0.1.1 from crates.io using debcargo 2.8.4

.dsc◂

Component	main
Package-List	librust-cargo-util-terminal-dev deb rust optional arch=any
Section	rust
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: cargo-util-terminal
Upstream-Contact:
 Ed Page <eopage@gmail.com>
 The Cargo Project Developers
Source: https://github.com/rust-lang/cargo

Files: *
Copyright:
 2014-2026 The Cargo Project Developers
 2014 Adolfo Ochagavía <aochagavia92@gmail.com>
 2014-2020 Alex Crichton <alex@alexcrichton.com>
 2014 Brian Koropoff <bkoropoff@gmail.com>
 2014 Christoph Burgdorf <christoph.burgdorf@bvsn.org>
 2014 Liigo Zhuang <com.liigo@gmail.com>
 2014 Michael Gehring <mg@ebfe.org>
 2014 Paul Woolcock <pwoolcoc@gmail.com>
 2014 Steve Klabnik <steve@steveklabnik.com>
 2014 Yehuda Katz <wycats@gmail.com>
 2015 Gabriel Souza Franco <gabrielfrancosouza@gmail.com>
 2015 Ivan Ukhov <ivan.ukhov@gmail.com>
 2015 Mike Boutin <mike.boutin@gmail.com>
 2015 Sebastian Thiel <byronimo@gmail.com>
 2015 Сухарик <suhr@i2pmail.org>
 2016-2021 Aleksey Kladov <aleksey.kladov@gmail.com>
 2016 Felix S. Klock II <pnkfelix@pnkfx.org>
 2016-2017 Nick Cameron <ncameron@mozilla.com>
 2016 Sascha Grunert <Sascha.Grunert@rohde-schwarz.com>
 2016 Stephen Becker IV <github@deathbyescalator.com>
 2016 Steven Allen <steven@stebalien.com>
 2016 mcarton <cartonmartin+git@gmail.com>
 2016 skeleten <skele@ymail.com>
 2017 Georg Brandl <georg@python.org>
 2017 Richard Dodd <richard.dodd@itp-group.co.uk>
 2017 Siddharth Agarwal <sid0@fb.com>
 2017 Steffen Butzer <steffen.butzer@outlook.com>
 2018 Dale Wijnand <dale.wijnand@gmail.com>
 2018 David Tolnay <dtolnay@gmail.com>
 2018 Eh2406 <YeomanYaacov@gmail.com>
 2018-2025 Eric Huss <eric@huss.org>
 2018 kennytm <kennytm@gmail.com>
 2019 Alexander Regueiro <alexreg@me.com>
 2019 Alexander Sieg <alex@xanderio.de>
 2019 Esteban Küber <esteban@kuber.com.ar>
 2019 SnejUgal <contact@snejugal.ru>
 2020 Alex Tokarev <aleksator@gmail.com>
 2020 David Wood <david@davidtw.co>
 2020 Joshua M. Clulow <jmc@oxide.computer>
 2021 Dharma Saputra Wijaya <dswijj@gmail.com>
 2021 Josh Triplett <josh@joshtriplett.org>
 2022-2026 Ed Page <eopage@gmail.com>
 2023 Weihang Lo <me@weihanglo.tw>
 2023 hzlinyiyu <linyiyu1992@gmail.com>
 2024 Alexander Sergeev <etc9053@gmail.com>
 2024-2026 Scott Schafer <schaferjscott@gmail.com>
 2025 DaniPopes <57450786+DaniPopes@users.noreply.github.com>
 2025 Ethan Budd <budde25@protonmail.com>
 2025 Matyas Susits <susits.matyas@gmail.com>
 2026 Eric Case <eric.case@gmail.com>
 2026 Philipp Jungkamp <p.jungkamp@gmx.net>
 Individual contributors
License: Expat or Apache-2.0
Comment:
 Named holders are the human git authors of src/cargo/core/shell.rs,
 renamed to crates/cargo-util-terminal/src/shell.rs in 2026, and of
 crates/cargo-util-terminal. LICENSE-MIT names no holder. Bot
 accounts are omitted.

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: Expat or Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 24 days ago.

Report◂

DFSG NEW review for rust-cargo-util-terminal version 0.1.1-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable

Licensing

The crate is dual-licensed MIT OR Apache-2.0 (upstream license = "MIT OR Apache-2.0" in Cargo.toml), both licence texts ship as LICENSE-MIT and LICENSE-APACHE, and debian/copyright is valid DEP-5: the Files: * and Files: debian/* stanzas cover every file in the tree, the Expat text is reproduced in full, Apache-2.0 is delegated to /usr/share/common-licenses/Apache-2.0, the two permissive licences are combinable, and nothing in the tree carries a non-free term, an unlicensed file or a missing preferred form for modification. The long list of individual holders cannot be re-derived here (no upstream git, no network), but no holder, licence or version is visibly wrong or missing.

Packaging

A routine, well-formed debcargo package: 3.0 (quilt) with debhelper-compat 13 and dh-sequence-cargo, all Build-Depends/Depends resolvable in the archive or in NEW, two patches both carrying DEP-3 headers (one hand-written relaxation of anstream, one debcargo-autogenerated), three autopkgtests, a sane changelog and Standards-Version 4.7.4 against current policy 4.7.4.1. The single anomaly is that debian/cargo-checksum.json records a placeholder instead of the crate's checksum.

Issues

minor packaging 1. debian/cargo-checksum.json records no crate checksum, only a debcargo failure string ◂

Files: debian/cargo-checksum.json
Evidence: {"package":"Could not get crate checksum","files":{}}
Problem: The package field of debian/cargo-checksum.json must hold the SHA-256 of the upstream .crate; here it holds the literal message debcargo writes when it could not obtain that checksum, so the shipped file does not tie the orig tarball to the published crate, although debian/changelog states the crate was taken from crates.io. (The empty files map is debcargo's normal output and is not itself a problem.)
Fix: Regenerate the file with debcargo after (re)fetching the crate so that package contains the real SHA-256, or explain in the changelog why upstream's checksum is unavailable.

Verified ◂

Full tree inventory taken: 8 files at the top of the upstream tree, src/lib.rs, src/shell.rs, src/style.rs, and all 14 files under debian/; .pc/ excluded throughout.
debian/copyright read in full; it is DEP-5 with the exact 1.0 Format URI, a Files: * stanza, a later Files: debian/* stanza (no files fall outside them), complete Expat text and an Apache-2.0 stand-alone paragraph pointing at /usr/share/common-licenses/Apache-2.0; Expat is the correct short name for upstream's "MIT".
Tree-wide grep for Copyright, (C), ©, SPDX identifiers, Licensed under, GPL/LGPL/Apache/MPL, public domain, All rights reserved returned only LICENSE-APACHE, LICENSE-MIT and debian/copyright*; src/*.rs carry no per-file notices. No vendored or embedded third-party code, no .jar/.so/.exe/PDF/minified asset, no font or image.
Dependencies checked with apt-cache: rustc 1.97.1 (satisfies >= 1.96), and librust-anstream-0.6, -annotate-snippets-0.12, -anstyle-1, -anyhow-1, -libc-0.2, -serde-1, -serde-json-1, -supports-hyperlinks-3, -supports-unicode-3 all exist with sufficient versions; librust-anstyle-hyperlink-dev and librust-anstyle-progress-dev are not in the archive but are built by rust-anstyle-hyperlink 1.0.2-1 and rust-anstyle-progress 0.1.4-1, waiting in NEW, so they are not a fault.
anstream 1.x is absent from the archive (only librust-anstream-dev 0.6.21), so debian/patches/relax-deps.patch relaxing anstream to >= 0.6.21, < 0.7 is necessary and is correctly mirrored in Build-Depends/Depends; the patch has DEP-3 headers with Forwarded: not-needed.
debian/patches/auto/auto-remove-targets.patch removes only the cfg(windows) windows-sys dependency; that code is never compiled on Debian targets.
dh-cargo's buildsystem (read at /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm) deletes Cargo.lock before configuring, so the upstream Cargo.lock pinning anstream 1.0.0 cannot make the build fail.
Standards-Version 4.7.4 vs current Policy 4.7.4.1, and Policy 5.2 makes neither Priority nor Section mandatory in the source stanza, so their absence from debian/control is not a violation.
debian/tests/control: the @ in Test-Command features and Depends is valid (autopkgtest spec expands it to the source package's binaries); the third test's Architecture: !riscv64 restriction is odd but harmless.
debian/rules, debian/source/format, debian/changelog, debian/upstream/metadata, debian/debcargo.toml and the Vcs-/Homepage fields reviewed; no maintainer scripts, no .install/.links/.dirs, no lintian overrides, nothing that breaks an upgrade.
uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 0.1.2, packaged 0.1.1), which is not a fault of the package.

Not confirmed ◂

The individual copyright holders and year ranges in debian/copyright are stated to be derived from the upstream git history of cargo's shell.rs; with no network access and no upstream checkout I could not re-verify them.
Nothing was compiled or run (cargo/rustc are not installed on the reviewing system); in particular I could not determine whether cargo accepts the non-hexadecimal package checksum in debian/cargo-checksum.json or errors on it, nor compile-check the anstream 0.6 relaxation.

Proposed changes ◂

None.

Review Information

accepted — allocated to mechtilde 23 days ago, started 23 days ago, completed 23 days ago.

Final Comment

Back to Dashboard | View all reviews for this package