DFSG, Licensing & New Packages Team

debian/copyright check

Command: cme check dpkg-copyright
Exit code: 0

Warning in 'Files:"*" License short_name': value is "MIT". There are many versions of the MIT license. Please use Expat instead, when it matches. See L<Debian copyright format|https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-specification> and L<wikipedia|https://en.wikipedia.org/wiki/MIT_License#Various_versions>for details.
Offending value: 'MIT'
Warning in 'Files:"debian/*" License short_name': value is "MIT". There are many versions of the MIT license. Please use Expat instead, when it matches. See L<Debian copyright format|https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-specification> and L<wikipedia|https://en.wikipedia.org/wiki/MIT_License#Various_versions>for details.
Offending value: 'MIT'
you can try 'cme fix dpkg-copyright' to fix the warnings shown above

licenserecon

Command: licenserecon
Exit code: 3

en: Versions: licenserecon '17.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

d/copyright      | licensecheck

BSD-2-Clause     | BSD-2-clause and/or Expat docs/bench/1.bootstrap.js

Look for SPDX

Command: grep -r -B1 'SPDX-'
Exit code: 1

(no output)

Lintian

Command: lintian -i -I -v --pedantic
Exit code: 2

N:
E: librust-jsonpath-lib-polars-vendor-dev: privacy-breach-uses-embedded-file You may use the libjs-bootstrap package. (https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css) [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/docs/bench/index.html]
N: 
N:   This package creates a potential privacy breach by fetching data from an
N:   external website at runtime. Please remove these scripts or external HTML
N:   resources.
N:   
N:   Instead you can use the Debian package indicated in the context if it is
N:   compatible.
N: 
N:   Visibility: error
N:   Show-Always: no
N:   Check: files/privacy-breach
N:   Renamed from: privacy-breach-may-use-debian-package
N: 
N:
E: librust-jsonpath-lib-polars-vendor-dev: privacy-breach-uses-embedded-file You may use the libjs-bootstrap package. (https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css) [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/docs/index.html]
N:
W: librust-jsonpath-lib-polars-vendor-dev: privacy-breach-generic [<script async src="https://www.googletagmanager.com/gtag/js?id=ua-3020058-1">] (https://www.googletagmanager.com/gtag/js?id=ua-3020058-1) [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/docs/index.html]
N: 
N:   This package creates a potential privacy breach by fetching data from an
N:   external website at runtime. Please remove these scripts or external HTML
N:   resources.
N:   
N:   Please replace any scripts, images, or other remote resources with
N:   non-remote resources. It is preferable to replace them with text and links
N:   but local copies of the remote resources are also acceptable as long as
N:   they don't also make calls to remote services. Please ensure that the
N:   remote resources are suitable for Debian main before making local copies
N:   of them.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: files/privacy-breach
N: 
N:
I: librust-jsonpath-lib-polars-vendor-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/LICENSE]
N: 
N:   This package ships a documentation file outside /usr/share/doc
N:   Documentation files are normally installed inside /usr/share/doc.
N:   
N:   If this file doesn't describe the contents or purpose of the directory it
N:   is in, please consider moving this file to /usr/share/doc/ or maybe even
N:   removing it. If this file does describe the contents or purpose of the
N:   directory it is in, please add a lintian override.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: documentation
N: 
N:   Screen: python/egg/metadata
N:     Advocates: "Scott Kitterman" <debian@kitterman.com>
N:     Reason: The folders XXX.dist-info/ and XXX.egg-info/ hold metadata for
N:             Python modules. Those files are not documentation even though
N:             some of their names carry the .txt file extension.
N:             
N:             Python modules can be both public and private.
N:             
N:             Read more in
N:             https://www.python.org/dev/peps/pep-0427/#the-dist-info-directory,
N:             https://www.python.org/dev/peps/pep-0376/#id16,
N:             https://www.python.org/dev/peps/pep-0610/,
N:             https://www.python.org/dev/peps/pep-0639/,
N:             https://setuptools.pypa.io/en/latest/deprecated/python_eggs.html,
N:             and Bug#1003913.
N: 
N:
I: librust-jsonpath-lib-polars-vendor-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/README.md]
N:
I: librust-jsonpath-lib-polars-vendor-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/docs/bench/index.html]
N:
I: librust-jsonpath-lib-polars-vendor-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/jsonpath_lib_polars_vendor-0.0.1/docs/index.html]
N:
I: rust-jsonpath-lib-polars-vendor source: upstream-metadata-missing-bug-tracking [debian/upstream/metadata]
N: 
N:   The DEP 12 metadata file does not specify any upstream bug tracking
N:   information (ie. the Bug-Database or Bug-Submit fields are missing).
N:   
N:   The upstream metadata can be found in the source package in the file
N:   debian/upstream/metadata.
N: 
N:   Please refer to https://dep-team.pages.debian.net/deps/dep12/ for details.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: debian/upstream/metadata
N: 
N:
P: rust-jsonpath-lib-polars-vendor source: package-uses-old-debhelper-compat-version 13
N: 
N:   This package uses a debhelper compatibility level that is no longer
N:   recommended. Please consider using the recommended level.
N:   
N:   For most packages, the best way to set the compatibility level is to
N:   specify debhelper-compat (= X) as a Build-Depends in debian/control. You
N:   can also use the debian/compat file or export DH_COMPAT in debian/rules.
N:   
N:   If no level is selected debhelper defaults to level 1, which is
N:   deprecated.
N: 
N:   Please refer to the debhelper(7) manual page for details.
N: 
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: debhelper
N: 
N:
P: rust-jsonpath-lib-polars-vendor source: source-contains-prebuilt-javascript-object [docs/0.bootstrap.js]
N: 
N:   The source tarball contains a prebuilt (minified) JavaScript object. They
N:   are usually left by mistake when generating the tarball by not cleaning
N:   the source directory first. You may want to report this as an upstream
N:   bug, in case there is no sign that this was intended.
N: 
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: files/source-missing
N: 
N:
P: rust-jsonpath-lib-polars-vendor source: source-contains-prebuilt-javascript-object [docs/bench/0.bootstrap.js]
N:
P: rust-jsonpath-lib-polars-vendor source: source-contains-prebuilt-javascript-object [docs/bench/1.bootstrap.js]
N:
P: rust-jsonpath-lib-polars-vendor source: source-contains-prebuilt-wasm-binary [docs/494668cdc2dc16eb1895.module.wasm]
N: 
N:   The source tarball contains a prebuilt binary wasm object. They are
N:   usually provided for the convenience of users. These files usually just
N:   take up space in the tarball and need to be rebuilt from source.
N:   
N:   Check if upstream also provides source-only tarballs that you can use as
N:   the upstream distribution instead. If not, you may want to ask upstream to
N:   provide source-only tarballs.
N: 
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: files/source-missing
N: 
N:
P: rust-jsonpath-lib-polars-vendor source: source-contains-prebuilt-wasm-binary [docs/bench/494668cdc2dc16eb1895.module.wasm]

duck

Command: duck
Exit code: 1

E: debian/copyright:17: Email: kris.kowal@cixar.com: ERROR (Certainty:possible)
   kris.kowal@cixar.com: No MX entry found.
   kris.kowal@cixar.com: No A entry found.
   kris.kowal@cixar.com: No AAAA entry found.

Author check: rust-jsonpath-lib-polars-vendor 0.0.1-1

Scanned 54 files. 10 author(s) declared in debian/copyright.

All source-file authors appear in debian/copyright.

License check: rust-jsonpath-lib-polars-vendor 0.0.1-1

Archive component: main

COMPATIBLE:

• BSD-2-Clause
• MIT