DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-nostr-gossip 0.45.1-1

Package Information

DescriptionNostr gossip traits - Rust source code

Source code for Debianized Rust crate "nostr-gossip"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Sponsorpaulliu@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/nostr-gossip] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-nostr-gossip
Uploaded3 hours ago

New Package Report

.changes◂
Sourcerust-nostr-gossip
Version0.45.1-1
Changed-ByYing-Chun Liu (PaulLiu) <paulliu@debian.org>
Architectureamd64 source
Distributionunstable
DateWed, 11 Nov 2026 12:48:16 +0000
Changelog◂
rust-nostr-gossip (0.45.1-1) unstable; urgency=medium
 .
   * Package nostr-gossip 0.45.1 from crates.io using debcargo 2.8.4
.dsc◂
Componentmain
Package-Listlibrust-nostr-gossip-dev deb rust optional arch=any
Sectionrust
Priorityoptional
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: nostr-gossip
Upstream-Contact:
 Yuki Kishimoto <yukikishimoto@protonmail.com>
 Nostr Dev Kit Developers
Source: https://github.com/nostrdevkit/nostr.git

Files: *
Copyright:
 2022-2023 Yuki Kishimoto <yukikishimoto@protonmail.com>
 2023-2026 Nostr Dev Kit Developers
License: MIT

Files: src/error.rs
       src/lib.rs
       src/prelude.rs
Copyright:
 2022-2023 Yuki Kishimoto
 2023-2025 Rust Nostr Developers
License: MIT

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
License: MIT

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for rust-nostr-gossip version 0.45.1-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The crate is MIT throughout: LICENSE is the standard MIT text, Cargo.toml declares license = "MIT", and the three source files with notices say "Distributed under the MIT software license". debian/copyright is DEP-5, names both holders found in the tree (Yuki Kishimoto, and Rust Nostr Developers / Nostr Dev Kit Developers for the later years), matches every file, and reproduces the MIT text in full. The prescan found no holder missing from the copyright file. No non-free terms, no vendored third-party code, no built or generated sources.

Packaging

Straightforward debcargo 2.8.4 output: debhelper compat 13 with dh-sequence-cargo, correct Build-Depends-Arch with <!nocheck>, ${misc:Depends} present (required below compat 14), Multi-Arch: same and Provides entries per the Rust team convention, autopkgtest stanzas present, Standards-Version 4.7.4 current, clean unstable changelog and no patches. override_dh_auto_test: dh_auto_test -- test --all runs the crate's own unit tests at build time; at compat 13 dh skips that override under nocheck, so no guard is needed.

Issues

None.

Verified ◂
  • Read every file in the tree besides .pc/: .cargo_vcs_info.json, CHANGELOG.md, Cargo.lock (300 of 1132 lines sampled), Cargo.toml, Cargo.toml.orig, LICENSE, README.md, the four files under src/, and all eleven files under debian/.
  • Prescan author check: the only holders in the tree are in LICENSE (2022-2023 Yuki Kishimoto, 2023-present Nostr Dev Kit Developers) and in the headers of src/lib.rs, src/error.rs, src/prelude.rs (2022-2023 Yuki Kishimoto, 2023-2025 Rust Nostr Developers); all four name/year forms are covered by debian/copyright (Files: * and the src/error.rs src/lib.rs src/prelude.rs stanza). src/flags.rs carries no notice and is covered by the catch-all Files: * stanza.
  • Licence evidence is MIT only: LICENSE is unmodified MIT, Cargo.toml has license = "MIT", the source headers say "Distributed under the MIT software license", and greps for SPDX-License-Identifier, GNU, Apache, Mozilla, public domain, All rights reserved, non-commercial and similar found nothing. The MIT text is the same as the one reproduced in debian/copyright.
  • debian/copyright is DEP-5 format 1.0 with a correct Format: URL, Upstream-Name, Upstream-Contact and Source; stanzas are ordered so that the three src/ files are covered by a later stanza than Files: *, and debian/* covers the packaging including the debcargo overlay files.
  • debian/copyright.debcargo.hint is debcargo's overlay hint (it still holds UNKNOWN-LICENSE; FIXME (overlay) markers used by the next debcargo update), not the shipped copyright file; it is covered by Files: debian/* and is standard in debcargo-maintained packages.
  • Cargo.lock and .cargo_vcs_info.json are cargo-generated registry metadata for the crates.io tarball, not built binaries; no compiled, minified or binary files exist in the tree.
  • debian/control at compat 13: Depends names ${misc:Depends} (required below compat 14) plus the two librust-* dependencies matching Cargo.toml (nostr 0.45 with std, opaquerr 0.2 with default features); Multi-Arch: same, Architecture: any, Provides for the unversioned/0/0.45/0.45.1 and +default-dev forms all follow the Rust team convention; Breaks: rustc (<< 1.85.0~) matches rust-version = 1.85.0 and is debcargo's normal output (librust-opaquerr-dev carries the same kind of field).
  • Dependencies checked with apt-cache: dh-sequence-cargo is provided by dh-cargo 34, librust-opaquerr-0.2+default-dev by librust-opaquerr-dev 0.2.0-1, and rustc 1.97.1/1.98.1 satisfy rustc:native (>= 1.85.0); debian/tests/control Depends (dh-cargo (>= 33~), rustc (>= 1.85.0), @) are satisfiable and @ is autopkgtest's standard marker for this source's own binaries.
  • debian/rules is a two-target dh rules file with dh $@ --buildsystem cargo and an override_dh_auto_test passing test --all to the cargo buildsystem; the crate declares no [features] and no [dev-dependencies], so testing it at build time needs nothing beyond its two build dependencies.
  • No debian/patches/ and no quilt patches; debian/source/format is 3.0 (quilt). Changelog: 0.45.1-1, distribution unstable, urgency medium, no bug closures claimed. debian/upstream/metadata and debian/watch present; watch not reviewed per instructions.
  • .dsc matches debian/control (same Build-Depends, Build-Depends-Arch, Vcs-*, Standards-Version, Testsuite: autopkgtest) and the tarball is the unmodified crates.io tree.
  • uscan found the packaged version as the newest upstream release (upstream 0.45.1, packaged 0.45.1).
Not confirmed ◂
  • librust-nostr-0.45+std-dev (in Build-Depends-Arch and in the binary's Depends) is absent from the reviewing system's package lists and from the NEW queue; no version of a librust-nostr-dev binary exists there at all, so the archive copy of the lists predates the upload of the nostr crate this package needs, and a build would show whether it has been accepted since.
  • debian/tests/control restricts only the --no-default-features stanza with Architecture: !riscv64; nothing in the package explains the restriction, and since the crate declares no features that variant is otherwise identical to the default-feature one. Not an issue on its own, but if it is not deliberate it silently drops test coverage on riscv64.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 2 hours ago.

Back to Dashboard | View all reviews for this package