DFSG NEW review for rust-opaquerr version 0.2.0-1

Summary

• Licensing is DFSG-compliant and debian/copyright is accurate: Yes
• Packaging is of good quality: Yes
• Issues: 0 blocker, 0 important, 0 minor
• debian/watch: version 5
• debian/copyright: machine-readable
• Scan before the review: nothing found

Licensing

debian/copyright is in DEP-5 format, with Files: * (2026 Yuki Kishimoto, MIT) and Files: debian/* (Debian Rust Maintainers, Ying-Chun Liu, MIT), and reproduces the full MIT text. Every upstream file is MIT: LICENSE carries Copyright (c) 2026 Yuki Kishimoto and the Expat text, and Cargo.toml/Cargo.toml.orig declare license = "MIT"; nothing else in the tree carries a copyright or licence notice. The crate has no dependencies, so nothing is vendored, and no non-free terms, missing licences or unbuilt sources were found.

Packaging

Unmodified debcargo 2.8.3 output of the kind the Rust team ships: debhelper compat 13 with dh-sequence-cargo, correct Build-Depends/Build-Depends-Arch split with the cargo/rustc/libstd-rust-dev group restricted with <!nocheck> (dh-cargo's build step only copies sources; only its test step runs cargo, and dh skips the override under nocheck at compat 13), the crate's own tests run at build time, autopkgtest tests present, Standards-Version 4.7.4 equal to the reviewing system's Policy, and a sane changelog. No policy violation or quality problem worth reporting was found.

Issues

None.

Verified

• Read every upstream file (LICENSE, README.md, CHANGELOG.md, Cargo.toml, Cargo.toml.orig, Cargo.lock, rustfmt.toml, rust-toolchain.toml, justfile, .gitignore, .cargo_vcs_info.json, .github/workflows/ci.yml, doc/define_error.md, examples/my_opaque_error.rs, src/lib.rs, src/macros.rs) and every file under debian/ in full or in the relevant ranges.
• The prescan listed no anomalous file and no unnamed holder; the LICENSE holder Copyright (c) 2026 Yuki Kishimoto is the one in the Files: * stanza, and a grep for Copyright/(C)/©/SPDX-License-Identifier/GNU/Apache/MPL/public domain/All rights reserved found nothing outside LICENSE and the two copyright drafts.
• All upstream files are MIT (no per-file headers, as is usual): they are covered by Files: *, and the MIT permission text is reproduced in full in debian/copyright, so no reference to /usr/share/common-licenses is needed.
• No vendored or third-party code: Cargo.lock contains only the opaquerr package itself, and the tree has no dependencies directory, no LICENSE/COPYING/NOTICE other than the top-level LICENSE, and no built, minified, PDF or generated artifacts; the orig.tar.gz contents match the unpacked tree.
• Packaging build-dependency logic checked against the helper: /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm build only copies the crate sources while test runs /usr/share/cargo/bin/cargo with the argument passed by override_dh_auto_test -- test --all; the <!nocheck> restrictions on cargo, rustc and libstd-rust-dev are therefore right, and dh skips the dh_auto_test override under DEB_BUILD_OPTIONS=nocheck at compat 13.
• debian/control: debhelper-compat (= 13) with dh-sequence-cargo (dh-cargo 34, which Provides dh-sequence-cargo, is in the archive), rustc >= 1.81.0 matching Cargo.toml rust-version and Breaks: rustc (<< 1.81.0~), librust-opaquerr-dev Architecture: any/Multi-Arch: same with the expected Provides, and ${misc:Depends} present, as required at compat 13.
• debian/tests/control is the debcargo pattern (cargo-auto-test with dh-cargo (>= 33~) and rustc (>= 1.81.0), @ as the package placeholder, allow-stderr); the !riscv64 restrictions are on the test variants only and do not weaken the all-features run.
• Standards-Version 4.7.4 equals the reviewing system's Policy 4.7.4 (policy tool, upgrading checklist A10.2), so it is current; changelog 0.2.0-1 is for unstable with a valid date and a debcargo-generated entry.
• debian/source/format is 3.0 (quilt) and there are no patches, so no patch or DEP-3 review was needed.
• debian/copyright.debcargo.hint is a leftover debcargo working file (it still carries FIXME (overlay) placeholders and UNKNOWN-LICENSE); nothing in the build reads or installs it and the authoritative debian/copyright is complete, so it is noted here rather than reported as a fault.
• Ignored as instructed: .pc/ and debian/cargo-checksum.json were not read and are not reported on; debian/watch was not reviewed.
• uscan found the packaged version as the newest upstream release (upstream 0.2.0, packaged 0.2.0).

Not confirmed

• Upstream copyright years could not be checked against the upstream git history (no network); debian/copyright's 2026 matches the shipped LICENSE and the CHANGELOG's 2026 dates, and debcargo's hint merely warns that years came from git.
• Whether the initial upload closes an ITP bug could not be checked: the changelog has no Closes: line, but no bug number is available offline.

Proposed changes

None.