DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-clubcard 0.3.4-1

Package Information

DescriptionExact membership query filter for static sets - Rust source code

Source code for Debianized Rust crate "clubcard"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByAlexander Kjäll <alexander.kjall@gmail.com>
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/clubcard] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-clubcard
Uploaded2 hours ago

New Package Report

.changes◂
Architectureamd64 source
Distributionunstable
DateWed, 21 Oct 2026 18:35:42 +0000
Sourcerust-clubcard
Version0.3.4-1
Changed-ByAlexander Kjäll <alexander.kjall@gmail.com>
Changelog◂
rust-clubcard (0.3.4-1) unstable; urgency=medium
 .
   * Package clubcard 0.3.4 from crates.io using debcargo 2.8.5+alpha.0
.dsc◂
Priorityoptional
Componentmain
Package-Listlibrust-clubcard-dev deb rust optional arch=any
Sectionrust
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: clubcard
Upstream-Contact: John M. Schanck <jschanck@mozilla.com>
Source: https://github.com/mozilla/clubcard/

Files: *
Copyright: 2024-2026 Mozilla Foundation
License: MPL-2.0

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Alexander Kjäll <alexander.kjall@gmail.com>
License: MPL-2.0

License: MPL-2.0
 Debian systems provide the MPL 2.0 in /usr/share/common-licenses/MPL-2.0

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for rust-clubcard version 0.3.4-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

All sources carry the MPL-2.0 header; debian/copyright is machine-readable, declares a single Files: * stanza as MPL-2.0 and refers to /usr/share/common-licenses/MPL-2.0. The prescan's author check found no missing holders; upstream author John M. Schanck / Mozilla Foundation correctly maps to the declared 'Mozilla Foundation' copyright. No built/binaries, no vendored code, no non-free terms.

Packaging

Clean debcargo-generated package. debian/rules uses dh with the cargo buildsystem at compat 13; Build-Depends/Build-Depends-Arch properly split with <!nocheck>; binary has correct Depends (rand, serde) and full Provides set; Multi-Arch same; autopkgtests cover all feature combinations; changelog sane (0.3.4-1 unstable); Standards-Version 4.7.4 matches current Policy 4.7.4.1.

Issues

None.

Verified

  • All 5 src/*.rs and examples/uint_no_partition/main.rs carry the MPL-2.0 header; LICENSE is the complete MPL 2.0 text incl. Exhibit A/B.
  • README.md, Cargo.toml, .github/workflows/rust.yml, examples/uint_no_partition/generate_test.py and 2000_nums.in (test data) have no per-file header but are covered by the Files: * MPL-2.0 catch-all; they are ordinary source/docs/data of the crate, not built artifacts.
  • No vendored or embedded third-party code; only external deps (rand, serde, sha2) resolved via Cargo and declared in Build-Depends/Depends.
  • prescan author check: every holder found is named in debian/copyright.
  • Standards-Version 4.7.4 equals current Policy 4.7.4.1 in its two significant components.
  • debian/control has ${misc:Depends} and its dependency substvars are complete at compat 13.
  • uscan found the packaged version as the newest upstream release (upstream 0.3.4, packaged 0.3.4).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (MPL-2.0).

Not confirmed

  • MPL-2.0 pointer to /usr/share/common-licenses is checked by the report tool itself, not independently verified here; no other licence short names are used.
  • Exactness of the 2024-2026 copyright years rests on the packaging's copyright file and upstream metadata; no contradiction found with in-tree notices.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package