DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: rust-muncher 0.7.0-1

Package Information

DescriptionEasy to use char muncher for writing a lexer - Rust source code

Source code for Debianized Rust crate "muncher"

MaintainerDaniel Baumann <daniel@debian.org>
Changed ByDaniel Baumann <daniel@debian.org>
Sponsormail@daniel-baumann.ch
Distributionsid
Architectureany
VCSgit: https://forgejo.debian.net/rust/rust-muncher (browse)
Trackerhttps://tracker.debian.org/pkg/rust-muncher
Uploaded29 days ago

New Package Report

.changes
Architecturesource amd64
Distributionsid
DateFri, 14 Aug 2026 07:04:33 +0000
Sourcerust-muncher
Version0.7.0-1
Changed-ByDaniel Baumann
Changelog
rust-muncher (0.7.0-1) sid; urgency=medium
 .
   * Initial upload to sid, needed for git-igitt.
.dsc
Sectionrust
Priorityoptional
Componentmain
Package-Listlibrust-muncher-dev deb rust optional arch=any
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: muncher
Upstream-Contact: https://github.com/DevinR528/muncher/issues
Source: https://github.com/DevinR528/muncher/tags

Files: *
Copyright: 2018 Devin R <devin.ragotzy@gmail.com>
License: MIT or Apache-2.0

Files: debian/*
Copyright: 2026 Daniel Baumann <daniel@debian.org>
License: MIT or Apache-2.0

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
     https://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 The complete text of the Apache-2.0 License
 can be found in /usr/share/common-licenses/Apache-2.0 file.

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

Review Information

accepted — allocated to eamanu 28 days ago, started 28 days ago, completed 28 days ago.

Final Comment

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
0.7.0-1 8c74fb22… 2026-08-22 22:39 2026-08-23 12:50 eamanu rejected VIEW

Public Notes

28 days ago ● public

licensecheck

Command: licensecheck -r --deb-machine .
Exit code: 0

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: FIXME
Upstream-Contact: FIXME
Source: FIXME
Disclaimer: Autogenerated by licensecheck

Files: ./.cargo_vcs_info.json
 ./.github/workflows/nightly.yml
 ./.github/workflows/stable.yml
 ./Cargo.toml
 ./Cargo.toml.orig
 ./README.md
 ./debian/cargo-checksum.json
 ./debian/changelog
 ./debian/control
 ./debian/rules
 ./debian/source/format
 ./debian/tests/control
 ./debian/upstream/metadata
 ./debian/watch
 ./rustfmt.toml
 ./src/lib.rs
 ./src/muncher.rs
Copyright: NONE
License: UNKNOWN
 FIXME

Files: ./debian/copyright
Copyright: 2018, Devin R <devin.ragotzy@gmail.com>
  2026, Daniel Baumann <daniel@debian.org>
License: Apache-2.0 and/or Expat
 FIXME

28 days ago ● public

debian/copyright check

Command: cme check dpkg-copyright
Exit code: 0

Warning in 'Files:"*" License short_name': value is "MIT or Apache-2.0". There are many versions of the MIT license. Please use Expat instead, when it matches. See L<Debian copyright format|https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-specification> and L<wikipedia|https://en.wikipedia.org/wiki/MIT_License#Various_versions>for details.
Offending value: 'MIT or Apache-2.0'
Warning in 'Files:"debian/*" License short_name': value is "MIT or Apache-2.0". There are many versions of the MIT license. Please use Expat instead, when it matches. See L<Debian copyright format|https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-specification> and L<wikipedia|https://en.wikipedia.org/wiki/MIT_License#Various_versions>for details.
Offending value: 'MIT or Apache-2.0'
you can try 'cme fix dpkg-copyright' to fix the warnings shown above
28 days ago ● public

licenserecon

Command: licenserecon
Exit code: 0

en: Versions: licenserecon '17.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

No significant differences found
28 days ago ● public

Look for SPDX

Command: grep -r -B1 'SPDX-'
Exit code: 1

(no output)

28 days ago ● public

Lintian

Command: lintian -i -I -v --pedantic
Exit code: 0

N:
W: rust-muncher changes: distribution-and-changes-mismatch unstable sid
N: 
N:   The Distribution in the .changes file indicates that packages should be
N:   installed into one distribution (suite), but the distribution in the
N:   Changes field copied from debian/changelog indicates that a different
N:   distribution was intended.
N:   
N:   This is an easy mistake to make when invoking "sbuild ... foo.dsc".
N:   Double-check the -d option if using sbuild in this way.
N: 
N:   Please refer to Bug#542747 and Bug#529281 for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: fields/distribution
N: 
N:
W: librust-muncher-dev: initial-upload-closes-no-bugs [usr/share/doc/librust-muncher-dev/changelog.Debian.gz:1]
N: 
N:   This package appears to be the first packaging of a new upstream software
N:   package (there is only one changelog entry and the Debian revision is 1),
N:   but it does not close any bugs. The initial upload of a new package should
N:   close the corresponding ITP bug for that package.
N:   
N:   This warning can be ignored if the package is not intended for Debian or
N:   if it is a split of an existing Debian package.
N: 
N:   Please refer to New packages (Section 5.1) in the Debian Developer's
N:   Reference for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/changelog
N:   Renamed from: new-package-should-close-itp-bug
N: 
N:
I: librust-muncher-dev: extended-description-is-probably-too-short
N: 
N:   The extended description (the lines after the first line of the
N:   "Description:" field) is only one or two lines long. The extended
N:   description should provide a user with enough information to decide
N:   whether they want to install this package, what it contains, and how it
N:   compares to similar packages. One or two lines is normally not enough to
N:   do this.
N: 
N:   Please refer to General guidelines for package descriptions (Section
N:   6.2.1) in the Debian Developer's Reference and The long description
N:   (Section 6.2.3) in the Debian Developer's Reference for details.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: fields/description
N: 
N:
I: librust-muncher-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/muncher-0.7.0/README.md]
N: 
N:   This package ships a documentation file outside /usr/share/doc
N:   Documentation files are normally installed inside /usr/share/doc.
N:   
N:   If this file doesn't describe the contents or purpose of the directory it
N:   is in, please consider moving this file to /usr/share/doc/ or maybe even
N:   removing it. If this file does describe the contents or purpose of the
N:   directory it is in, please add a lintian override.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: documentation
N: 
N:   Screen: python/egg/metadata
N:     Advocates: "Scott Kitterman" <debian@kitterman.com>
N:     Reason: The folders XXX.dist-info/ and XXX.egg-info/ hold metadata for
N:             Python modules. Those files are not documentation even though
N:             some of their names carry the .txt file extension.
N:             
N:             Python modules can be both public and private.
N:             
N:             Read more in
N:             https://www.python.org/dev/peps/pep-0427/#the-dist-info-directory,
N:             https://www.python.org/dev/peps/pep-0376/#id16,
N:             https://www.python.org/dev/peps/pep-0610/,
N:             https://www.python.org/dev/peps/pep-0639/,
N:             https://setuptools.pypa.io/en/latest/deprecated/python_eggs.html,
N:             and Bug#1003913.
N: 
N:
P: rust-muncher source: redundant-priority-optional-field [debian/control:3]
N: 
N:   This package currently sets the Priority field in the debian/control file
N:   to "optional".
N:   
N:   As of dpkg version 1.22.13, this field is set to "optional" by default. As
N:   such, in this case the Priority field is redundant and should be removed.
N: 
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: debian/control/field/priority
N: 
28 days ago ● public

duck

Command: duck
Exit code: 0

I: debian/copyright:19: URL: https://www.apache.org/licenses/LICENSE-2.0: INFORMATION (Certainty:wild-guess)
   Curl:0 HTTP:200 No error 
   Website seems to be outdated, is probably a parked domain or for sale. Please update your links!
   Matching regular expression(s):
    m/\breplaced with\b/i

28 days ago ● public

look for copyright

Command: egrep -R -i copyright
Exit code: 0

debian/copyright:Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
debian/copyright:Copyright: 2018 Devin R <devin.ragotzy@gmail.com>
debian/copyright:Copyright: 2026 Daniel Baumann <daniel@debian.org>
debian/copyright: The above copyright notice and this permission notice shall be included in all
debian/copyright: AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
28 days ago ● public

look for license

Command: egrep -R -i license
Exit code: 0

Cargo.toml.orig:license = "MIT/Apache-2.0"
Cargo.toml:license = "MIT/Apache-2.0"
debian/copyright:License: MIT or Apache-2.0
debian/copyright:License: MIT or Apache-2.0
debian/copyright:License: Apache-2.0
debian/copyright: Licensed under the Apache License, Version 2.0 (the "License");
debian/copyright: you may not use this file except in compliance with the License.
debian/copyright: You may obtain a copy of the License at
debian/copyright:     https://www.apache.org/licenses/LICENSE-2.0
debian/copyright: distributed under the License is distributed on an "AS IS" BASIS,
debian/copyright: See the License for the specific language governing permissions and
debian/copyright: limitations under the License.
debian/copyright: The complete text of the Apache-2.0 License
debian/copyright: can be found in /usr/share/common-licenses/Apache-2.0 file.
debian/copyright:License: MIT
debian/copyright: to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
README.md:#### License
README.md:Licensed under either of <a href="LICENSE-APACHE">Apache License, Version
README.md:2.0</a> or <a href="LICENSE-MIT">MIT license</a> at your option.
README.md:for inclusion in this project by you, as defined in the Apache-2.0 license,
README.md:shall be dual licensed as above, without any additional terms or conditions.

Back to Dashboard | View all reviews for this package