DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-nostr-blossom 0.45.1-1

Package Information

DescriptionInteracting with the Blossom protocol - Rust source code

Source code for Debianized Rust crate "nostr-blossom"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Sponsorpaulliu@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/nostr-blossom] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-nostr-blossom
Uploaded6 hours ago

New Package Report

.changes◂
Distributionunstable
DateWed, 11 Nov 2026 22:31:02 +0000
Sourcerust-nostr-blossom
Version0.45.1-1
Changed-ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Architectureamd64 source
Changelog◂ 
rust-nostr-blossom (0.45.1-1) unstable; urgency=medium
 .
   * Package nostr-blossom 0.45.1 from crates.io using debcargo 2.8.4
.dsc◂
Package-Listlibrust-nostr-blossom-dev deb rust optional arch=any
Sectionrust
Priorityoptional
Componentmain
debian/copyright◂ 
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: nostr-blossom
Upstream-Contact:
 Yuki Kishimoto <yukikishimoto@protonmail.com>
 Nostr Dev Kit Developers
Source: https://github.com/nostrdevkit/nostr.git

Files: *
Copyright:
 2022-2023 Yuki Kishimoto <yukikishimoto@protonmail.com>
 2023-2026 Nostr Dev Kit Developers
License: MIT

Files: src/error.rs
       src/lib.rs
       src/prelude.rs
Copyright:
 2022-2023 Yuki Kishimoto <yukikishimoto@protonmail.com>
 2023-2025 Rust Nostr Developers
License: MIT

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
License: MIT

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 5 hours ago.

Report◂

DFSG NEW review for rust-nostr-blossom version 0.45.1-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

Upstream is MIT, and debian/copyright is DEP-5 with the full MIT text. Its Files: * stanza names Yuki Kishimoto and Nostr Dev Kit Developers for the LICENSE and all files without their own headers, and a later stanza names Rust Nostr Developers for the three files (src/error.rs, src/lib.rs, src/prelude.rs) that still carry 2023-2025 Rust Nostr Developers headers. Every holder the prescan found is covered, no file is left unlicensed, and the prescan listed no built or otherwise unclear file to account for.

Packaging

Standard debcargo packaging: source format 3.0 (quilt), one DEP-3 patch relaxing bitcoin_hashes to the version Debian has, debhelper compat 13 with dh-sequence-cargo and a minimal rules, correct Build-Depends-Arch split with <!nocheck>, Multi-Arch: same and the usual Provides, debcargo-generated autopkgtests covering all-targets with and without features, correct Breaks on rustc, and Standards-Version 4.7.4 against Policy 4.7.4.1. The dependencies I could check exist with satisfying versions. The only thing I could not confirm is that librust-nostr (in Build-Depends-Arch and in debian/tests/control) is in the archive.

Issues

None.

Verified ◂
  • Read the whole tree: src/{bud01,bud02,client,error,lib,prelude}.rs, examples/*.rs, Cargo.toml, Cargo.toml.orig, Cargo.lock (head and dependency entries), LICENSE, README.md, CHANGELOG.md, .cargo_vcs_info.json, and every file under debian/ (.pc/ and debian/cargo-checksum.json excluded).
  • Prescan author check: the holders it found (Yuki Kishimoto, Nostr Dev Kit Developers, Rust Nostr Developers) are all named in debian/copyright; the scan reported no unmatched holder and listed no other file requiring accounting.
  • LICENSE is plain MIT (2022-2023 Yuki Kishimoto, 2023-present Nostr Dev Kit Developers); src/error.rs, src/lib.rs and src/prelude.rs carry 'Distributed under the MIT software license' headers. No SPDX tag, non-free wording or other licence anywhere in the tree.
  • debian/copyright is DEP-5 (Format 1.0 URL), full MIT text included; MIT is not in /usr/share/common-licenses, so reproducing it is required and done. Files: * is a catch-all, later stanzas override it for the three header-bearing files and debian/*. No Files-Excluded needed: the orig tarball is the crates.io crate and its contents match the tree.
  • debian/patches/0001-relax-dependencies.patch has Description, Author, Forwarded: not-needed and Last-Update, changes only the generated Cargo.toml (bitcoin_hashes 1.1 to >=1.0), which is what dh-cargo builds against.
  • apt-cache: librust-bitcoin-hashes-dev 1.0.0-1 satisfies >=1.0 and provides the sha256::Hash module the code uses (client.rs, bud01.rs, bud02.rs, examples/integration_test.rs); librust-clap-dev 4.6.7-1 satisfies the tests' >=4.6; librust-base64-0.22-dev, librust-serde-1+derive-dev, librust-tokio+full-dev 1.53.2, librust-opaquerr-0.2+alloc-dev/+default-dev 0.2.0-1, librust-reqwest-0.12+http2/json/rustls-tls-dev 0.12.28-5 and dh-sequence-cargo (dh-cargo 34) all exist.
  • apt-cache: rustc 1.97.1/1.98.1 satisfies rustc >= 1.85.0, the edition 2024 and rust-version 1.85.0 requirements, and Breaks: rustc (<< 1.85.0~).
  • Cargo.lock shows bitcoin_hashes 1.1.0 pulled in with its serde feature enabled by nostr, so bud02.rs's Serialize/Deserialize derive has the impl it needs without an extra +serde build-dependency in the package.
  • debian/tests/control covers --all-targets --all-features, --all-targets and --no-default-features with the dev-dependencies (clap, tokio, nostr +os-rng) declared; at compat 13 dh skips the cargo test step on nocheck, so <!nocheck> on the build deps is correct.
  • Standards-Version 4.7.4 against Policy 4.7.4.1 (xd://policy): first two components match, so not an issue.
  • uscan found the packaged version as the newest upstream release (upstream 0.45.1, packaged 0.45.1).
Not confirmed ◂
  • librust-nostr-0.45+std-dev (Build-Depends-Arch, binary Depends) and librust-nostr-0.45+os-rng-dev (debian/tests/control) were found neither in the archive lists nor in the NEW queue snapshot of 2026-11-12; the package cannot build without rust-nostr, so if that sibling upload is not accepted alongside this one, this upload would fail to build. The lists can be some days old, hence not reported as an issue.
  • I could not compile the crate against Debian's bitcoin_hashes 1.0.0, so the version relaxation (1.1 to >=1.0) is checked only against the API the code uses and apt-cache's 1.0.0-1 package, not by building.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 5 hours ago.

Back to Dashboard | View all reviews for this package