DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: rust-codespan 0.13.1-1

Package Information

DescriptionData structures for tracking locations in source code - Rust source code

Source code for Debianized Rust crate "codespan"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed BySteffen Moeller <moeller@debian.org>
Sponsormoeller@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/codespan] (browse)
Closes#1151330
Trackerhttps://tracker.debian.org/pkg/rust-codespan
Uploaded19 days ago

New Package Report

.changes◂
DateMon, 19 Oct 2026 23:33:46 +0200
Sourcerust-codespan
Version0.13.1-1
Changed-BySteffen Moeller <moeller@debian.org>
Architecturesource amd64
Distributionunstable
Changelog◂
rust-codespan (0.13.1-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1151330).
   * Package codespan 0.13.1 from crates.io using debcargo 2.8.4
.dsc◂
Sectionrust
Priorityoptional
Componentmain
Package-Listlibrust-codespan-dev deb rust optional arch=any
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: codespan
Upstream-Contact: Brendan Zabarauskas <bjzaba@yahoo.com.au>
Source: https://github.com/brendanzab/codespan

Files: *
Copyright:
 2018-2026 rendan Zabarauskas <bjzaba@yahoo.com.au>
License: Apache-2.0

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Steffen Moeller <moeller@debian.org>
License: Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 19 days ago.

Report◂

DFSG NEW review for rust-codespan version 0.13.1-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 1 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

DFSG-compliant. Small pure-Rust crate, all source files Apache-2.0 as declared; the full Apache License 2.0 text is present in LICENSE and referenced from /usr/share/common-licenses/Apache-2.0 in debian/copyright. LICENSE is the complete text (confirmed ends with the APPENDIX). No vendored code, no binary/minified/provenance files, no non-free terms. machine-readable DEP-5 format with correct Format URL. Sole upstream holder is Brendan Zabarauskas (Cargo.toml.orig authors), correctly represented, though misspelled 'rendan' in the Files: * stanza.

Packaging

Standard, sound debcargo-generated packaging. debhelper-compat 13 with dh-sequence-cargo, compat-13-correct (substvars present in Depends, nocheck handled by dh). Standards-Version 4.7.4 vs current Policy 4.7.4.1 is current. Complete autopkgtest matrix over all feature combinations. Multi-Arch same, Architecture any, full Provides list. debian/* is cleanly declared Apache-2.0.

Issues

minor licensing 1. Copyright holder name misspelled in the Files: * stanza ◂
  • Files: debian/copyright, Files: * -> Copyright:
  • Basis: checked, in the package or with a reference tool
  • Evidence: 2018-2026 rendan Zabarauskas <bjzaba@yahoo.com.au> (leading 'B' of 'Brendan' dropped, cf. Upstream-Contact and the copyright.debcargo.hint 'Brendan Zabarauskas')
  • Problem: debian/copyright must accurately name the copyright holder; the name as written is not a real entity. The holder is clear from context so this is cosmetic, not blocking.
  • Fix: Correct the name to Brendan Zabarauskas.
Verified ◂
  • Prescan copyright-holder check: every holder found is named in debian/copyright; no files flagged.
  • All 5 src/*.rs files, README.md, CHANGELOG.md, Cargo.toml(.orig) read; none carries a licence header or a copyright notice of its own, so collection under the single Apache-2.0 with the Cargo authors' holder is correct.
  • LICENSE is the complete Apache License 2.0 text (ends with the APPENDIX boilerplate); LICENSE file present at tree root.
  • Grep across the tree found no other licence markers (SPDX, MIT, BSD, GPL) outside debian/ and LICENSE.
  • No vendored code, no minified/binary/provenance-unknown files; tree is entirely hand-written Rust sources, docs and Cargo metadata.
  • debian/copyright is DEP-5 machine-readable with the exact current Format URL and a valid standalone Apache-2.0 License paragraph pointing at /usr/share/common-licenses/Apache-2.0.
  • Standards-Version 4.7.4 is current against Policy 4.7.4.1 (first two components 4.7).
  • debhelper compat 13: ${misc:Depends} present in Depends; auto-test skip on nocheck is dh's own behaviour at this level.
  • All Build-Depends marked <!nocheck> as appropriate; Build-Depends with dh-sequence-cargo correctly used.
  • autopkgtests cover --all-targets with all features, each non-default feature alone, and no-default; riscv64 exclusions consistent.
  • uscan found the packaged version as the newest upstream release (upstream 0.13.1, packaged 0.13.1).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).
Not confirmed ◂
  • Why the model asked for what a review has no use for. During this review it asked once for something outside the package and the reviewing system (another file of the sandbox, or a URL), or was given part of the review tooling's own configuration, and that was refused or withheld. A model does this when something it has read tells it to, so look in the package for text addressed to a reviewing program, and treat this report with suspicion. Refused: read: "/home/review" is not a file of the package or of the reviewing system.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 19 days ago.

Review Information

accepted — allocated to awm 19 days ago, started 19 days ago, completed 19 days ago.

Final Comment

Hi,

Please correct copyright holder "Brendan Zabarauskas" typo in debian/copyright (missing "B" at start.

Thanks!

Back to Dashboard | View all reviews for this package