DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: rust-mp4parse 0.17.0-1

New Package Report

.changes
Version0.17.0-1
Changed-ByJeremy Bícha
Architecturesource amd64
Distributionexperimental
DateThu, 25 Sep 2025 16:52:56 -0400
Sourcerust-mp4parse
.dsc
Sectionrust
Priorityoptional
Componentmain
Package-Listlibrust-mp4parse-dev deb rust optional arch=any
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: mp4parse
Upstream-Contact:
 Ralph Giles <giles@mozilla.com>
 Matthew Gregan <kinetik@flim.org>
 Alfredo Yang <ayang@mozilla.com>
 Jon Bauman <jbauman@mozilla.com>
 Bryce Seager van Dyk <bvandyk@mozilla.com>
Source: https://github.com/mozilla/mp4parse-rust

Files: *
Copyright:
 2016-2018 Ralph Giles <giles@mozilla.com>
 2016-2025 Matthew Gregan <kinetik@flim.org>
 2020-2022 Jon Bauman <jbauman@mozilla.com>
 2018-2020 Bryce Seager van Dyk <bvandyk@mozilla.com>
 Alfredo Yang <ayang@mozilla.com>
License: MPL-2.0

Files: debian/*
Copyright:
 2025 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2025 Jeremy Bícha <jbicha@ubuntu.com>
License: MPL-2.0

License: MPL-2.0
 Debian systems provide the MPL 2.0 in /usr/share/common-licenses/MPL-2.0

Review Information

rejected — allocated to siretart 1 month, 15 days ago, started 1 month, 15 days ago, completed 1 month, 13 days ago.

Final Comment

In the archive ./tests/corrupt/invalid-avif-colr-multiple.zip I found two files that appear to be Copyright Apple Inc., 2015.
I couldn't find where they are coming from and am concerned that they may have been copied in an unauthrized manner. Please clarify the licensing situation with upstream and document the findings in Debian/copyright. In the mean time, I'd recommend removing those test files before uploading to Debian.

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
0.17.0-3 a058fc93… 2026-02-16 11:36 2026-02-16 11:38 siretart accepted VIEW
0.17.0-2 4312d317… 2026-02-14 11:51 2026-02-15 11:06 siretart rejected VIEW

Back to Dashboard | View all reviews for this package