DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: rust-muncher 0.7.0-1

Package Information

DescriptionEasy to use char muncher for writing a lexer - Rust source code

Source code for Debianized Rust crate "muncher"

MaintainerDaniel Baumann <daniel@debian.org>
Changed ByDaniel Baumann <daniel@debian.org>
Sponsormail@daniel-baumann.ch
Distributionsid
Architectureany
VCSgit: https://forgejo.debian.net/rust/rust-muncher (browse)
Trackerhttps://tracker.debian.org/pkg/rust-muncher
Uploaded1 month, 9 days ago

New Package Report

.changes
Version0.7.0-1
Changed-ByDaniel Baumann
Architecturesource amd64
Distributionsid
DateFri, 14 Aug 2026 07:04:33 +0000
Sourcerust-muncher
Changelog
rust-muncher (0.7.0-1) sid; urgency=medium
 .
   * Initial upload to sid, needed for git-igitt.
.dsc
Sectionrust
Priorityoptional
Componentmain
Package-Listlibrust-muncher-dev deb rust optional arch=any
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: muncher
Upstream-Contact: https://github.com/DevinR528/muncher/issues
Source: https://github.com/DevinR528/muncher/tags

Files: *
Copyright: 2018 Devin R <devin.ragotzy@gmail.com>
License: MIT or Apache-2.0
Reference: /usr/share/common-licenses/Apache-2.0

Files: debian/*
Copyright: 2026 Daniel Baumann <daniel@debian.org>
License: MIT or Apache-2.0
Reference: /usr/share/common-licenses/Apache-2.0

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

Review Information

rejected — allocated to eamanu 30 days ago, started 30 days ago, completed 30 days ago.

Final Comment

Thanks for your contributions to Debian!

Just a simple comment but I need to do it:

  • Please add the apache-2.0 reference below (after file licenses stanza). Please follow https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
0.7.0-1 5bff645a… 2026-08-24 22:18 2026-08-24 22:23 eamanu accepted VIEW

Public Notes

30 days ago ● public

licensecheck

Command: licensecheck -r --deb-machine .
Exit code: 0

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: FIXME
Upstream-Contact: FIXME
Source: FIXME
Disclaimer: Autogenerated by licensecheck

Files: ./.cargo_vcs_info.json
 ./.github/workflows/nightly.yml
 ./.github/workflows/stable.yml
 ./Cargo.toml
 ./Cargo.toml.orig
 ./README.md
 ./debian/cargo-checksum.json
 ./debian/changelog
 ./debian/control
 ./debian/rules
 ./debian/source/format
 ./debian/tests/control
 ./debian/upstream/metadata
 ./debian/watch
 ./rustfmt.toml
 ./src/lib.rs
 ./src/muncher.rs
Copyright: NONE
License: UNKNOWN
 FIXME

Files: ./debian/copyright
Copyright: 2018, Devin R <devin.ragotzy@gmail.com>
  2026, Daniel Baumann <daniel@debian.org>
License: Expat
 FIXME

30 days ago ● public

debian/copyright check

Command: cme check dpkg-copyright
Exit code: 2

Warning in 'Files:"*" License short_name': value is "MIT or Apache-2.0". There are many versions of the MIT license. Please use Expat instead, when it matches. See L<Debian copyright format|https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-specification> and L<wikipedia|https://en.wikipedia.org/wiki/MIT_License#Various_versions>for details.
Offending value: 'MIT or Apache-2.0'
Element 'License-Alias' of node 'Files:"*"' is deprecated
Configuration item 'Files:"*" License short_name' has a wrong value:
	value 'MIT or Apache-2.0' does not match grammar from model: license 'Apache-2.0' is not declared in a stand-alone License paragraph. Expected one of the current stand-alone License paragraphs: MIT.
value is computed from '$replace{$alias}', where 
		'alias' from path '- - License-Alias' is undef
30 days ago ● public

licenserecon

Command: licenserecon
Exit code: 0

en: Versions: licenserecon '17.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

No significant differences found
30 days ago ● public

Look for SPDX

Command: grep -r -B1 'SPDX-'
Exit code: 1

(no output)

30 days ago ● public

Lintian

Command: lintian -i -I -v --pedantic
Exit code: 0

N:
W: rust-muncher changes: distribution-and-changes-mismatch unstable sid
N: 
N:   The Distribution in the .changes file indicates that packages should be
N:   installed into one distribution (suite), but the distribution in the
N:   Changes field copied from debian/changelog indicates that a different
N:   distribution was intended.
N:   
N:   This is an easy mistake to make when invoking "sbuild ... foo.dsc".
N:   Double-check the -d option if using sbuild in this way.
N: 
N:   Please refer to Bug#542747 and Bug#529281 for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: fields/distribution
N: 
N:
W: librust-muncher-dev: initial-upload-closes-no-bugs [usr/share/doc/librust-muncher-dev/changelog.Debian.gz:1]
N: 
N:   This package appears to be the first packaging of a new upstream software
N:   package (there is only one changelog entry and the Debian revision is 1),
N:   but it does not close any bugs. The initial upload of a new package should
N:   close the corresponding ITP bug for that package.
N:   
N:   This warning can be ignored if the package is not intended for Debian or
N:   if it is a split of an existing Debian package.
N: 
N:   Please refer to New packages (Section 5.1) in the Debian Developer's
N:   Reference for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/changelog
N:   Renamed from: new-package-should-close-itp-bug
N: 
N:
W: rust-muncher source: missing-license-paragraph-in-dep5-copyright apache-2.0 [debian/copyright:13]
N: 
N:   The Files paragraph in the machine readable copyright file references a
N:   license for which no stand-alone License paragraph exists.
N:   
N:   Sometimes this tag appears because of incorrect ordering. Stand-alone
N:   License paragraphs must appear *after* all Files paragraphs.
N: 
N:   Please refer to
N:   https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ and
N:   Bug#959067 for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/copyright/dep5
N: 
N:
I: librust-muncher-dev: extended-description-is-probably-too-short
N: 
N:   The extended description (the lines after the first line of the
N:   "Description:" field) is only one or two lines long. The extended
N:   description should provide a user with enough information to decide
N:   whether they want to install this package, what it contains, and how it
N:   compares to similar packages. One or two lines is normally not enough to
N:   do this.
N: 
N:   Please refer to General guidelines for package descriptions (Section
N:   6.2.1) in the Debian Developer's Reference and The long description
N:   (Section 6.2.3) in the Debian Developer's Reference for details.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: fields/description
N: 
N:
I: librust-muncher-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/muncher-0.7.0/README.md]
N: 
N:   This package ships a documentation file outside /usr/share/doc
N:   Documentation files are normally installed inside /usr/share/doc.
N:   
N:   If this file doesn't describe the contents or purpose of the directory it
N:   is in, please consider moving this file to /usr/share/doc/ or maybe even
N:   removing it. If this file does describe the contents or purpose of the
N:   directory it is in, please add a lintian override.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: documentation
N: 
N:   Screen: python/egg/metadata
N:     Advocates: "Scott Kitterman" <debian@kitterman.com>
N:     Reason: The folders XXX.dist-info/ and XXX.egg-info/ hold metadata for
N:             Python modules. Those files are not documentation even though
N:             some of their names carry the .txt file extension.
N:             
N:             Python modules can be both public and private.
N:             
N:             Read more in
N:             https://www.python.org/dev/peps/pep-0427/#the-dist-info-directory,
N:             https://www.python.org/dev/peps/pep-0376/#id16,
N:             https://www.python.org/dev/peps/pep-0610/,
N:             https://www.python.org/dev/peps/pep-0639/,
N:             https://setuptools.pypa.io/en/latest/deprecated/python_eggs.html,
N:             and Bug#1003913.
N: 
N:
P: rust-muncher source: redundant-priority-optional-field [debian/control:3]
N: 
N:   This package currently sets the Priority field in the debian/control file
N:   to "optional".
N:   
N:   As of dpkg version 1.22.13, this field is set to "optional" by default. As
N:   such, in this case the Priority field is redundant and should be removed.
N: 
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: debian/control/field/priority
N: 
30 days ago ● public

duck

Command: duck
Exit code: 0

(no output)

30 days ago ● public

look for copyright

Command: egrep -R -i copyright
Exit code: 0

debian/copyright:Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
debian/copyright:Copyright: 2018 Devin R <devin.ragotzy@gmail.com>
debian/copyright:Copyright: 2026 Daniel Baumann <daniel@debian.org>
debian/copyright: The above copyright notice and this permission notice shall be included in all
debian/copyright: AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
30 days ago ● public

look for license

Command: egrep -R -i license
Exit code: 0

Cargo.toml.orig:license = "MIT/Apache-2.0"
Cargo.toml:license = "MIT/Apache-2.0"
debian/copyright:License: MIT or Apache-2.0
debian/copyright:Reference: /usr/share/common-licenses/Apache-2.0
debian/copyright:License: MIT or Apache-2.0
debian/copyright:Reference: /usr/share/common-licenses/Apache-2.0
debian/copyright:License: MIT
debian/copyright: to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
README.md:#### License
README.md:Licensed under either of <a href="LICENSE-APACHE">Apache License, Version
README.md:2.0</a> or <a href="LICENSE-MIT">MIT license</a> at your option.
README.md:for inclusion in this project by you, as defined in the Apache-2.0 license,
README.md:shall be dual licensed as above, without any additional terms or conditions.

Back to Dashboard | View all reviews for this package