Review: rust-console-subscriber 0.5.0-1

Package Information

Description	Telemetry collector for Tokio console - Rust source code `tracing-subscriber::Layer` for collecting Tokio console telemetry. Source code for Debianized Rust crate "console-subscriber"
Maintainer	Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed By	Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
Sponsor	paulliu@debian.org
Distribution	unstable
Architecture	any
VCS	git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/console-subscriber] (browse)
Tracker	https://tracker.debian.org/pkg/rust-console-subscriber
Uploaded	21 days ago

New Package Report

.changes◂

Distribution	unstable
Date	Sat, 17 Oct 2026 12:29:01 +0000
Source	rust-console-subscriber
Version	0.5.0-1
Changed-By	Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
Architecture	amd64 source

Changelog◂

rust-console-subscriber (0.5.0-1) unstable; urgency=medium
 .
   * Package console-subscriber 0.5.0 from crates.io using debcargo 2.8.3

.dsc◂

Section	rust
Priority	optional
Component	main
Package-List	librust-console-subscriber-dev deb rust optional arch=any

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: console-subscriber
Upstream-Contact:
 Eliza Weisman <eliza@buoyant.io>
 Tokio Contributors <team@tokio.rs>
Source: https://github.com/tokio-rs/console/

Files: *
Copyright:
 2021 Eliza Weisman <eliza@buoyant.io>
 2021 Tokio Contributors <team@tokio.rs>
License: MIT

Files: LICENSE
Copyright: 2021 Tokio Contributors
License: MIT

Files: examples/grpc_web/app/src/gen/google/protobuf/duration_pb.ts
Copyright: 2008 Google Inc.  All rights reserved.
License: BSD-3-clause

Files: examples/grpc_web/app/src/gen/google/protobuf/timestamp_pb.ts
Copyright: 2008 Google Inc.  All rights reserved.
License: BSD-3-clause

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
License: MIT

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: BSD-3-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 1. Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 3. Neither the name of the <organization> nor the names of its contributors
    may be used to endorse or promote products derived from this software
    without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE HOLDERS OR
 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
 PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 20 days ago.

Report◂

DFSG NEW review for rust-console-subscriber version 0.5.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 with the correct 1.0 Format URL and accounts for all 64 upstream files. Files: * is MIT for the crate (Cargo.toml, README.md and LICENSE all say MIT); LICENSE gets its own correct stanza, and the only two files with third-party notices, examples/grpc_web/app/src/gen/google/protobuf/duration_pb.ts and timestamp_pb.ts, each have a stanza naming Google Inc. with the BSD-3-Clause text reproduced in full (BSD-3-Clause is not in /usr/share/common-licenses, so that inline text is required and present). A case-insensitive search for copyright/licence wording over the whole tree found no other notices and no non-free terms; the prescan found no copyright holder missing from the file. No compiled or obfuscated artifacts are shipped.

Packaging

This is standard, well-formed debcargo output: a single librust-...-dev package, Architecture: any / Multi-Arch: same, debhelper compat 13 with dh-sequence-cargo, two applied quilt patches, six autopkgtests, current Standards-Version 4.7.4 (Policy is 4.7.4.1) and a sane UNRELEASED-free 0.5.0-1 unstable changelog. Build- and binary dependencies match Cargo.toml feature by feature, and every name I checked exists as a real or virtual package in the review system's archive. Patch series is complete and the debian/patches/auto patch is clearly marked as debcargo-generated; the manual patch removes only the unpackaged tonic-web dev-dependency.

Issues

None.

Verified ◂

Prescan: it named no missing copyright holder; the only files with notices of their own are examples/grpc_web/app/src/gen/google/protobuf/duration_pb.ts and timestamp_pb.ts (header // Copyright 2008 Google Inc. All rights reserved.), and both are covered by their own Files: stanza with holder 2008 Google Inc. and License: BSD-3-clause, whose full text is in the file.
All other 62 upstream files carry no copyright/licence header; they are MIT per Cargo.toml (license = "MIT"), README.md and LICENSE, which matches the Files: * stanza and its named holders Eliza Weisman and Tokio Contributors.
LICENSE (Copyright (c) 2021 Tokio Contributors) is covered by its own stanza, overriding Files: * as DEP-5 requires (later stanza wins).
Searched the whole tree (excluding .pc/ and debian/cargo-checksum.json) for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU General Public, GNU Lesser, Apache License, Mozilla Public, public domain, All rights reserved: hits only in LICENSE, README.md, the two Google files and debian/*. No non-commercial/no-modification/field-of-use wording anywhere.
debian/clean deletes examples/grpc_web/app/.eslintrc.cjs; this is the standard workaround for lintian's package-contains-eslint-config-file (matched on basename ^\.eslintrc in /usr/share/lintian/lib/Lintian/Check/Files/Names.pm), the file is still present in the source package and covered by Files: *.
examples/grpc_web/app/src/gen/*_pb.ts are human-readable TypeScript emitted by protoc-gen-es (headers // @generated by protoc-gen-es v1.7.2); they are not compiled by the Debian build (dh-cargo builds only the Rust crate with default features), and the 8 console files are generated from console-api's schemas while the 2 Google files carry their own BSD-3 notice. package-lock.json is an npm lockfile, not vendored code.
No .jar, .class, .so, .wasm, .min.*, PDF, node_modules/ or dist/ anywhere in the tree.
debian/control dependencies match Cargo.toml: feature variants for console-api (default+transport), hyper-util (default+tokio), serde (default+derive), tokio (default+macros+sync+time+tracing), tokio-stream (default+net), tonic (default+transport), tracing-subscriber (env-filter+fmt+registry+parking-lot), hdrhistogram (serialization), futures-task (no default); librust-parking-lot-0.12+default-dev and librust-tokio-vsock-0.7+default/tonic014-dev are in Depends because they back the optional parking_lot and vsock features.
Checked in the review system's apt lists that the named packages exist and satisfy the version floors: console-api 0.9.0-1 (provides +transport), tokio 1.53.1, tonic 0.14.5+dfsg-4 (+transport), prost 0.14.4, tokio-vsock 0.7.2-2 (+tonic014), parking-lot 0.12.5, tracing-subscriber 0.3.23 (+parking-lot), futures-task 0.3.34, humantime 2.4.0, thread_local 1.1.10, tokio-stream 0.1.19, tower 0.5.3, tower-http 0.6.8, futures 0.3.34, http 1.5.0, hyper-util 0.1.19, hdrhistogram 7.6.0.
Optional-feature crates absent from Build-Depends-Arch are not needed for the build: dh-cargo's test runs cargo build (default features only), and the autopkgtest --features parking_lot/vsock commands get those crates through the package under test's own Depends.
debian/patches/series lists both patches and both are applied in the tree; the auto patch removes the grpc-web feature (its tonic-web dev-dependency is not in Debian), and the remaining [[example]] grpc_web is skipped by cargo because its required feature no longer exists.
Read in full: debian/copyright, control, changelog, rules, clean, debcargo.toml, patches/series and both patches, source/format, tests/control and its hint, copyright.debcargo.hint; plus Cargo.toml.orig and the relevant generated/npm files under examples/grpc_web/app.
uscan found the packaged version as the newest upstream release (upstream 0.5.0, packaged 0.5.0).

Not confirmed ◂

The .proto schemas that regenerate the console TypeScript files in examples/grpc_web/app/src/gen/ are not in this source package; I did not verify whether Debian's rust-console-api source ships them. The generated .ts files are themselves readable source, so this does not affect their licensing.
No build or autopkgtest was run; behaviour was reasoned from dh-cargo's Buildsystem/cargo.pm installed on the review system.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 19 days ago.

Review Information

accepted — allocated to eamanu 19 days ago, started 19 days ago, completed 19 days ago.

Final Comment

Public Notes

19 days ago ● public

Author check: rust-console-subscriber 0.5.0-1

Scanned 64 files. 6 author(s) declared in debian/copyright.

All source-file authors appear in debian/copyright.

19 days ago ● public

License check: rust-console-subscriber 0.5.0-1

Archive component: main

COMPATIBLE:

BSD-3-clause
MIT

Back to Dashboard | View all reviews for this package