DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-negentropy 0.5.3-1

Package Information

Descriptionnegentropy set-reconciliation protocol - Rust source code

Source code for Debianized Rust crate "negentropy"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Sponsorpaulliu@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/negentropy] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-negentropy
Uploaded2 hours ago

New Package Report

.changes◂
Distributionunstable
Sourcerust-negentropy
Version0.5.3-1
Changed-ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Architectureamd64 source
Changelog◂ 
rust-negentropy (0.5.3-1) unstable; urgency=medium
 .
   * Package negentropy 0.5.3 from crates.io using debcargo 2.8.3
.dsc◂
Package-Listlibrust-negentropy-dev deb rust optional arch=any
Sectionrust
Priorityoptional
Componentmain
debian/copyright◂ 
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: negentropy
Upstream-Contact: Yuki Kishimoto <yukikishimoto@protonmail.com>
Source: https://github.com/rust-nostr/negentropy.git

Files: *
Copyright: 2023-2025 Yuki Kishimoto <yukikishimoto@protonmail.com>
License: MIT

Files: src/constants.rs
       src/encoding.rs
       src/error.rs
       src/id.rs
       src/lib.rs
       src/storage.rs
       src/types.rs
Copyright:
 2023 Doug Hoyte
 2023-2025 Yuki Kishimoto <yukikishimoto@protonmail.com>
License: MIT

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
License: MIT

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-negentropy version 0.5.3-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The whole tree is MIT-licensed and no DFSG problem exists: every source file carries a two-line header naming Doug Hoyte (2023) and/or Yuki Kishimoto (2023), LICENSE is MIT (2023-2025 Yuki Kishimoto), and debian/copyright is DEP-5 with the full MIT text. Its Files: * stanza covers the remaining files and a later stanza correctly adds Doug Hoyte to the seven src/ files that credit him, leaving src/sha256.rs (Yuki only) under Files: *. Years and holders match the notices; there is no other licence, no vendored third-party code and no file without a licence.

Packaging

Textbook debcargo 2.8.3 output: debhelper compat 13 with dh-sequence-cargo and the cargo buildsystem, Build-Depends-Arch limited to cargo/rustc/libstd-rust-dev with <!nocheck> consistent with dh skipping dh_auto_test under nocheck, architecture-independent split is a single librust-negentropy-dev (Architecture: any, Multi-Arch: same) with the usual versioned Provides, four autopkgtests using cargo-auto-test from dh-cargo 34 (available in unstable), no patches and no maintainer scripts, a single sane unstable changelog entry, correct Vcs-* fields and Standards-Version 4.7.4 against Policy 4.7.4.1. Nothing in it would break an upgrade or policy; the only weak spot is that the target release's tests need dev-dependencies, which this crate does not have.

Issues

None.

Verified ◂
  • Read all 11 files in debian/ in full (control, copyright, changelog, rules, debcargo.toml, copyright.debcargo.hint, tests/control, source/format, watch left to the separate check); debian/cargo-checksum.json and .pc/ passed over as instructed.
  • Inventory: 35 upstream files, all plain text - 12 top-level (Cargo.toml, Cargo.toml.orig, Cargo.lock, LICENSE, README.md, CHANGELOG.md, CONTRIBUTING.md, SECURITY.md, justfile, rustfmt.toml, .gitignore, .cargo_vcs_info.json), 3 under .github/ (pull_request_template.md, ISSUE_TEMPLATE/*.md, workflows/ci.yml), examples/negentropy.rs and 8 files under src/. No binaries, fonts, images, archives, PDFs, minified or generated code.
  • Prescan author check found no holder missing from debian/copyright; grep of the whole tree for Copyright/(C)/©/SPDX/All rights reserved found only Yuki Kishimoto (2023; LICENSE 2023-2025) and Doug Hoyte (2023), both named in the Files: * and src stanza respectively.
  • src/constants.rs, encoding.rs, error.rs, id.rs, lib.rs, storage.rs, types.rs carry // Copyright (c) 2023 Doug Hoyte and // Copyright (c) 2023 Yuki Kishimoto and are exactly the files listed in debian/copyright's second stanza; src/sha256.rs has Yuki only and falls under Files: *.
  • src/sha256.rs is a hand-written SHA-256 (FIPS 180 work schedule and constants, standard test vectors in its #[test]) with no third-party notice; it is MIT like the rest, so no missing licence.
  • examples/negentropy.rs: copyright 2023 Yuki Kishimoto, covered by Files: *; no other licence text anywhere in the tree (no LICENSE/COPYING/NOTICE in subdirectories).
  • Cargo.lock lists only the negentropy crate itself, so the package embeds no third-party Rust code.
  • Tree matches the orig tarball (same file set and byte sizes: e.g. src/lib.rs 28.4KB, src/sha256.rs 7.3KB), and the .debian.tar.xz contains no debian/patches, so there are no unrecorded source changes.
  • debian/copyright: DEP-5 with the exact Format URL, correct stanza order (Files: * then the src stanza), MIT text present in a stand-alone License paragraph, debian/* assigned to the Debian Rust Maintainers and the uploader.
  • debian/copyright.debcargo.hint is debcargo's overlay input; its FIXME/UNKNOWN-LICENSE placeholders were resolved in the shipped debian/copyright and the file is covered by the debian/* stanza and installed nowhere.
  • debhelper tool: at compat 13 dh skips override_dh_auto_test under DEB_BUILD_OPTIONS=nocheck, so dh_auto_test -- test --all staying in that target and the <!nocheck> build deps are consistent.
  • /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm: sub test runs cargo test (the wrapper) when rules passes test; Cargo.toml declares no dev-dependencies, so nothing is missing from Build-Depends, and sub build only copies sources for a -dev package.
  • apt-cache: dh-cargo 34 in unstable provides dh-sequence-cargo and satisfies the autopkgtest dh-cargo (>= 33~); it depends on cargo, so cargo is installed even in a nocheck build where cargo:native <!nocheck> is dropped.
  • Standards-Version 4.7.4 has the same first two components as the reviewing system's Policy 4.7.4.1, so it is current.
  • uscan found the packaged version as the newest upstream release (upstream 0.5.3, packaged 0.5.3).
Not confirmed ◂
  • The single changelog entry has no Closes: #... for an ITP/WNPP bug; whether one exists and should be closed could not be checked from the package.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package