rust-cypher-parser 0.8.1-1

Package Information

Description	Cypher graph query lexer and parser - Rust source code Source code for Debianized Rust crate "cypher-parser"
Maintainer	Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed By	Simon Quigley <tsimonq2@debian.org>
Sponsor	tsimonq2@debian.org
Distribution	unstable
Architecture	any
VCS	git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/cypher-parser] (browse)
Tracker	https://tracker.debian.org/pkg/rust-cypher-parser
Uploaded	2 hours ago

New Package Report

.changes◂

Date	Fri, 06 Nov 2026 21:23:48 -0600
Source	rust-cypher-parser
Version	0.8.1-1
Changed-By	Simon Quigley <tsimonq2@debian.org>
Architecture	source amd64
Distribution	unstable

Changelog◂

rust-cypher-parser (0.8.1-1) unstable; urgency=medium
 .
   * Package cypher-parser 0.8.1 from crates.io using debcargo 2.8.4

.dsc◂

Priority	optional
Component	main
Package-List	librust-cypher-parser-dev deb rust optional arch=any
Section	rust

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: cypher-parser
Upstream-Contact: Shopify Inc.
Source: https://github.com/Shopify/cypher-parser

Files: *
Copyright: 2025 Shopify Inc.
License: Expat

Files: tests/tck.rs
Copyright:
 2025 Shopify Inc.
 openCypher contributors
License: Expat and Apache-2.0
Comment:
 The test harness is Expat. The ported queries and expected results are
 derived from the openCypher Technology Compatibility Kit (Apache-2.0).

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: Apache-2.0
 On Debian systems, the full text of the Apache License 2.0 can be found
 in /usr/share/common-licenses/Apache-2.0.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-cypher-parser version 0.8.1-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The crate is Expat (MIT text) throughout: LICENSE.md carries the MIT/Expat notice for Shopify Inc., Cargo.toml declares license = "MIT", no source file carries a conflicting notice, and there are no dependencies (empty [dependencies], Cargo.lock lists only this crate), so nothing is vendored. debian/copyright is DEP-5, Files: * names Shopify Inc. with Expat, and a later tests/tck.rs stanza correctly overrides it for the openCypher TCK-derived test data with Expat and Apache-2.0, naming the openCypher contributors. Full Expat text is included and Apache-2.0 is correctly referenced from /usr/share/common-licenses. Both licences are DFSG-free and compatible.

Packaging

Standard, well-formed debcargo 2.8.4 output: debhelper compat 13 with dh-sequence-cargo and dh $@ --buildsystem cargo, Build-Depends-Arch matching the crate's rust-version = "1.89.0" (with the corresponding Breaks: rustc (<< 1.89.0~)), correct Multi-Arch/Provides set for librust-cypher-parser-dev, a cargo-auto-test autopkgtest, and upstream/metadata, debcargo.toml and Vcs-* fields in place. Standards-Version 4.7.4 matches the current Policy 4.7.4.1 in its first two components. No patches are needed since the crate has no dependencies.

Issues

None.

Verified ◂

Inventoried the whole tree (29 files): 9 files in src/, 7 in tests/, Cargo.toml, Cargo.toml.orig, Cargo.lock, .cargo_vcs_info.json, README.md, CONTRIBUTING.md, CODE_OF_CONDUCT.md, LICENSE.md, .gitignore, .github/dependabot.yml plus three workflows, and debian/*. No binary, generated, minified or PDF files exist in the tree.
LICENSE.md is the MIT/Expat text with Copyright (c) 2025-present, Shopify Inc.; Cargo.toml and Cargo.toml.orig both say license = "MIT"; debian/copyright Files: * gives Copyright: 2025 Shopify Inc. and License: Expat, which matches (year drift 2025 vs 2025-present is not material).
No per-file licence headers anywhere in src/ or tests/ other than tests/tck.rs; a tree-wide grep for Copyright/(C)/©/SPDX/Licensed under/GNU/Apache/MPL/public domain/All rights reserved found no other terms.
tests/tck.rs:17-19 states the ported queries and expected results are derived from the openCypher TCK under Apache-2.0, created by the openCypher community; the later Files: tests/tck.rs stanza in debian/copyright covers exactly that with Expat and Apache-2.0 and openCypher contributors, and its Comment explains the split. Apache-2.0 is referenced from /usr/share/common-licenses/Apache-2.0, which exists on the reviewing system.
The crate has no dependencies ([dependencies] empty in Cargo.toml.orig, Cargo.lock contains only cypher-parser 0.8.1), so there is no vendored or embedded third-party code; LICENSE.md's pointer to a generated THIRD_PARTY_LICENSES.html refers to a release artifact not shipped and not needed.
CODE_OF_CONDUCT.md is a Contributor Covenant 1.4 adaptation and says so with the upstream link in its Attribution section, so the attribution its source licence requires is present in the file itself; it asserts no separate copyright holder.
debian/copyright.debcargo.hint is debcargo's template (FIXME (overlay) UNKNOWN-AUTHORS, License: MIT); the resolved, authoritative file is debian/copyright, and the hint ships in normal debcargo uploads.
Contributed contributors-file content of tests/tck.rs (binary-tree-1 named graph, Match1/Match5/ReturnOrderBy1/Conditional2/TriadicSelection1 scenarios) is test data; the file cites the source feature files and upstream repository.
debian/control: compat 13, dh-sequence-cargo, Build-Depends-Arch cargo:native, rustc:native (>= 1.89.0) and libstd-rust-dev, all <!nocheck>; debian/rules uses dh $@ --buildsystem cargo with override_dh_auto_test: dh_auto_test -- test --all, the standard debcargo arrangement.
Autopkgtest uses /usr/share/cargo/bin/cargo-auto-test cypher-parser 0.8.1 --all-targets --all-features with dh-cargo (>= 33~) and rustc (>= 1.89.0), matching the crate's rust-version.
debian/changelog is a single 0.8.1-1 entry for unstable, urgency medium, dated 2026-11-06, crediting debcargo 2.8.4.
Standards-Version 4.7.4 against Policy 4.7.4.1 (current): first two components match, so not an issue.
globs and greps were run with gitignore: false; .pc/ and debian/cargo-checksum.json were left unread as instructed. debian/watch was not reviewed.
uscan found the packaged version as the newest upstream release (upstream 0.8.1, packaged 0.8.1).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed ◂

Apache-2.0 section 4(d) NOTICE compliance for the TCK-derived material in tests/tck.rs could not be checked against the upstream openCypher repository (no network access); the package's own header names the openCypher community as the work's creators.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package