DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: rust-mail-parser 0.11.9+ds-1

Package Information

DescriptionFast and robust e-mail parsing library for Rust - Rust source code

Source code for Debianized Rust crate "mail-parser"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByJérémy Lal <kapouer@melix.org>
Sponsorkapouer@melix.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/mail-parser] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-mail-parser
Uploaded17 days ago

New Package Report

.changes◂
Changed-ByJérémy Lal <kapouer@melix.org>
Architectureamd64 source
Distributionunstable
DateThu, 22 Oct 2026 01:57:01 +0000
Sourcerust-mail-parser
Version0.11.9+ds-1
Changelog◂
rust-mail-parser (0.11.9+ds-1) unstable; urgency=medium
 .
   * Package mail-parser 0.11.9 from crates.io using debcargo 2.8.4
.dsc◂
Package-Listlibrust-mail-parser-dev deb rust optional arch=any
Sectionrust
Priorityoptional
Componentmain
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: mail-parser
Upstream-Contact: Stalwart Labs <hello@stalw.art>
Source: https://github.com/stalwartlabs/mail-parser
Files-Excluded:
 resources/eml/legacy/*
Comment: The legacy samples (Hunny Software, Inc.) have an unclear license.
 The Dovecot samples (thirdparty/ and malformed/) are MIT licensed and are
 kept, together with the RFC-based samples in rfc/.

Files: *
Copyright: 2020 Stalwart Labs <hello@stalw.art>
License: Apache-2.0 or Expat

Files: resources/eml/thirdparty/* resources/eml/malformed/*
Copyright: 2003-2018 Dovecot authors
License: Expat
Comment: See https://github.com/dovecot/core/blob/master/COPYING

Files: resources/eml/rfc/*
Copyright: The Internet Society / IETF Trust and the persons identified as the
 document authors
License: BSD-3-clause
Comment: Sample messages reproduced from IETF RFCs (notably RFC 2045-2049 and
 RFC 8621) plus a few trivial handcrafted examples. These are insubstantial
 message bodies without their own copyright notices; the documents they are
 taken from are distributed under the IETF Trust Legal Provisions (BCP 78),
 which states that the code is under BSD license.
 See https://trustee.ietf.org/documents/trust-legal-provisions/.

Files: src/decoders/base64.rs
Copyright: 2005, 2006, 2007 Nick Galbreath <nickg@modp.com>
License: BSD-2-clause
Comment: Table adapted from https://github.com/client9/stringencoders
 which was released with BSD license, and later MIT.

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Jérémy Lal <kapouer@melix.org>
License: Apache-2.0 or Expat

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: BSD-2-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
 met:
 .
    * Redistributions of source code must retain the above copyright
      notice, this list of conditions and the following disclaimer.
    * Redistributions in binary form must reproduce the above
      copyright notice, this list of conditions and the following disclaimer
      in the documentation and/or other materials provided with the
      distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: BSD-3-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 - Redistributions of source code must retain the above copyright notice,
   this list of conditions and the following disclaimer.
 - Redistributions in binary form must reproduce the above copyright notice,
   this list of conditions and the following disclaimer in the documentation
   and/or other materials provided with the distribution.
 - Neither the name of Internet Society, IETF or IETF Trust, nor the names
   of specific contributors, may be used to endorse or promote products
   derived from this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS”
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 17 days ago.

Report◂

DFSG NEW review for rust-mail-parser version 0.11.9+ds-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: 1 found

Licensing

debian/copyright is machine-readable DEP-5. The catch-all Files: * (Apache-2.0 or Expat) matches upstream Cargo.toml's Apache-2.0 OR MIT and the SPDX headers (APACHE-2.0 OR MIT) on every src/ and examples/ file. Specific stanzas correctly cover the Dovecot MIT thirdparty/malformed samples, the IETF RFC samples (BSD-3-clause) and src/decoders/base64.rs (BSD-2-clause, Nick Galbreath's table), each with full licence text included (Apache-2.0 via common-licenses). All licences are free and mutually compatible. The unclear-licence legacy samples were removed in the +ds repack (Files-Excluded resources/eml/legacy/*), and the skip-legacy-eml-tests.patch keeps the test suite consistent with their absence. Upstream also ships LICENSES/Apache-2.0.txt and MIT.txt.

Packaging

Standard, well-formed debcargo output: debhelper-compat 13 with dh-sequence-cargo, correct Build-Depends/-Arch split with <!nocheck> handling, proper substvars (${misc:Depends} present, correct at compat 13), Multi-Arch: same library package, comprehensive Provides. Both patches have DEP-3 headers and clear purposes (hashify 0.2→0.3 adaptation; skip excluded legacy corpus). Standard autopkgtests cover each feature, with flaky/!riscv64 restrictions consistent with debcargo.toml's documented test_is_broken rationale. Changelog, Standards-Version 4.7.4 (current Policy 4.7.4.1), Vcs-* and upstream/metadata all sane.

Issues

None.

Verified ◂
  • resources/eml/thirdparty/005.eml (prescan binary item) is a multipart MIME test message with binary/UTF-16/EUC-JP text parts; covered by the Dovecot MIT resources/eml/thirdparty/* stanza; test data, not a licensing problem
  • Nick Galbreath (prescan author item) is present in debian/copyright in the src/decoders/base64.rs stanza (2005-2007, BSD-2-clause)
  • SPDX Apache-2.0 OR MIT headers verified on src/ and examples/ files sampled
  • thirdparty/ and malformed/ each carry a COPYING stating Dovecot MIT (2003-2018), matching the copyright stanza
  • Files-Excluded resources/eml/legacy/* absent from the extracted tree, confirming the +ds repack removed the unclear-licence samples
  • Standards-Version 4.7.4 is current-adequate against Policy 4.7.4.1
  • Cargo.toml license Apache-2.0 OR MIT matches the Apache-2.0 or Expat catch-all stanza (Expat == MIT)
  • uscan found the packaged version as the newest upstream release (upstream 0.11.9, packaged 0.11.9+ds).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).
Not confirmed ◂
  • Debcargo-format autopkgtest correctness per feature not build-verified (cannot build); the flaky/!riscv64 restrictions and skip-legacy patch make the shipped tests self-consistent
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 17 days ago.

Review Information

accepted — allocated to awm 14 days ago, started 14 days ago, completed 14 days ago.

Final Comment

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
0.11.9-1 304347d3… 2026-10-19 08:28 2026-10-19 08:28 dfsg-uploader rejected VIEW

Back to Dashboard | View all reviews for this package