DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-libsodium-rs 0.2.6-1

Package Information

DescriptionRust bindings for libsodium using libsodium-sys-stable - Rust source code

Source code for Debianized Rust crate "libsodium-rs"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByJeremy Bícha <jbicha@ubuntu.com>
Sponsorjbicha@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/libsodium-rs] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-libsodium-rs
Uploaded2 hours ago

New Package Report

.changes◂
DateFri, 23 Oct 2026 15:48:14 +0200
Sourcerust-libsodium-rs
Version0.2.6-1
Changed-ByJeremy Bícha <jbicha@ubuntu.com>
Architecturesource amd64
Distributionunstable
Changelog◂
rust-libsodium-rs (0.2.6-1) unstable; urgency=medium
 .
   * Package libsodium-rs 0.2.6 from crates.io using debcargo 2.8.4
.dsc◂
Package-Listlibrust-libsodium-rs-dev deb rust optional arch=any
Sectionrust
Priorityoptional
Componentmain
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: libsodium-rs
Upstream-Contact: Frank Denis <github@pureftpd.org>
Source: https://github.com/jedisct1/libsodium-rs

Files: *
Copyright: 2025-2026 Frank Denis <github@pureftpd.org>
License: MIT

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Jeremy Bícha <jbicha@ubuntu.com>
License: MIT

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-libsodium-rs version 0.2.6-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The entire crate is MIT-licensed, written by a single upstream author (Frank Denis), and debian/copyright describes it correctly. The file is in DEP-5 format with a Files: * stanza naming Frank Denis (2025-2026) and a debian/* stanza, and it reproduces the full MIT text (the notice must be reproduced, and MIT is not in /usr/share/common-licenses). The prescan author check found no missing holders. grep found no non-free terms, no vendored third-party code, and no built/precompiled files; every shipped source file is Rust source in its preferred form.

Packaging

This is a standard, correctly-generated debcargo package. debian/control has a single Architecture: any, Multi-Arch: same -dev package with correct Provides for the collapsed feature packages, Build-Depends-Arch marked <!nocheck> (correct, since dh-cargo's build step only copies sources and compilation happens in the test step, which dh skips under nocheck at compat 13). debian/rules uses dh $@ --buildsystem cargo with an override that sets SODIUM_USE_PKG_CONFIG=true, which is required so libsodium-sys-stable links the system libsodium rather than a vendored copy. Patches have clear purpose, autopkgtests exercise default/no-default/all-features, changelog/Standards-Version/Vcs-* are all sane.

Issues

None.

Verified

  • Enumerated the whole tree (glob, gitignore:false): ~68 upstream files, all Rust .rs source plus Cargo.toml, Cargo.toml.orig, Cargo.lock, .cargo_vcs_info.json, LICENSE, README.md — no vendored crates, binaries, bytecode, archives, or minified code.
  • The prescan author check reported 'every holder found is named in debian/copyright'; the sole upstream holder is Frank Denis github@pureftpd.org, matching Cargo.toml authors and the LICENSE notice ("Copyright (c) 2025-2026 Frank Denis").
  • grep across the tree for Copyright, (C), ©, SPDX, licence grant wording, public domain, All rights reserved found only the MIT LICENSE header and README's MIT pointer; grep for non-free terms (non-commercial, no-modification, not evil, etc.) found nothing.
  • debian/copyright begins with the exact Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ line and reproduces the full MIT licence text; the LICENSE file is the same MIT text.
  • Read debian/control, rules, changelog, source/format, patches/series, both patches, tests/control, debcargo.toml, upstream/metadata; read /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm to confirm the build step copies sources and the test step compiles, so the <!nocheck> Build-Depends-Arch is correct; confirmed current Policy is 4.7.4.1 (Standards-Version 4.7.4 is fine).
  • uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 0.3.0, packaged 0.2.6), which is not a fault of the package.

Not confirmed

None.

Proposed changes

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package