rust-pest-stack-guard 1.0.1-1

Package Information

Description	Internal native stack probing for pest - Rust source code Source code for Debianized Rust crate "pest_stack_guard"
Maintainer	Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed By	Simon Quigley <tsimonq2@debian.org>
Sponsor	tsimonq2@debian.org
Distribution	unstable
Architecture	any
VCS	git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/pest-stack-guard] (browse)
Tracker	https://tracker.debian.org/pkg/rust-pest-stack-guard
Uploaded	2 hours ago

New Package Report

.changes◂

Date	Thu, 12 Nov 2026 13:32:21 -0600
Source	rust-pest-stack-guard
Version	1.0.1-1
Changed-By	Simon Quigley <tsimonq2@debian.org>
Architecture	source amd64
Distribution	unstable

Changelog◂

rust-pest-stack-guard (1.0.1-1) unstable; urgency=medium
 .
   * Package pest_stack_guard 1.0.1 from crates.io using debcargo 2.8.4

.dsc◂

Section	rust
Priority	optional
Component	main
Package-List	librust-pest-stack-guard-dev deb rust optional arch=any

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: pest_stack_guard
Upstream-Contact: Tomas Tauber <me@tomtau.be>
Source: https://github.com/pest-parser/pest_stack_guard

Files: *
Copyright: 2026 Tomas Tauber <me@tomtau.be>
License: Expat or Apache-2.0

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: Expat or Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-pest-stack-guard version 1.0.1-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 1 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: nothing found

Licensing

The whole tree is nine small files. debian/copyright is DEP-5 with the correct 1.0 Format URL, and its Files: * stanza covers every upstream file and names the only upstream holder, Tomas Tauber, with the dual licence the crate declares (license = "MIT OR Apache-2.0" in Cargo.toml), written here as Expat or Apache-2.0 and backed by the full Expat text and a pointer to /usr/share/common-licenses/Apache-2.0. LICENSE-MIT is the plain Expat text and LICENSE-APACHE is Apache-2.0 with the boilerplate notice Copyright 2026 Tomas Tauber, matching the copyright file. MIT and Apache-2.0 are both DFSG-free and compatible, and no other licence wording, third-party code, generated binary or unclear-provenance asset exists in the tree.

Packaging

This is ordinary debcargo output: compat 13 with dh-sequence-cargo, Standards-Version 4.7.4 (current for Policy 4.7.4.1), a single librust-pest-stack-guard-dev package with the usual Provides set, Breaks: rustc (<< 1.83~) matching the crate's rust-version = "1.83", a DEP-14 Vcs-Git/Vcs-Browser pair, the debcargo autopkgtest template exercising default, all-features and no-default-features, and the single autogenerated remove_targets patch, which matches filter_targets = ["debian"]/Linux-only building. One real defect: the psm dependency demands a version the archive does not have.

Issues

minor packaging 1. Build-Depends and Depends require librust-psm-0.1-dev (>= 0.1.24), but unstable has only 0.1.21 ◂

Files: debian/control:9, debian/control:24, Cargo.toml:43
Basis: checked, in the package or with a reference tool
Evidence: librust-psm-0.1+default-dev (>= 0.1.24) <!nocheck> in Build-Depends-Arch and librust-psm-0.1+default-dev (>= 0.1.24) in the binary Depends. apt-cache show librust-psm-dev gives Source: rust-psm (0.1.21-1), Version: 0.1.21-1+b1, providing librust-psm-0.1+default-dev (= 0.1.21-1+b1). By contrast librust-stacker-dev is 0.1.25-1 and does satisfy (>= 0.1.25).
Problem: The only librust-psm-dev in the archive is 0.1.21, which cannot satisfy the >= 0.1.24 constraint, and Cargo's own requirement psm = "0.1.24" (caret, i.e. >= 0.1.24, < 0.2) rejects 0.1.21 as well, so the source cannot be built and the binary package cannot be installed. The lists are current (they contain the same librust-stacker-dev 0.1.25-1 that this upload needs), and psm 0.1.24 is not in NEW either.
Fix: Either wait for rust-psm to reach 0.1.24 in the archive, or add a debcargo patch relaxing the requirement in Cargo.toml to psm = "0.1.21" and regenerate the dependency fields: src/lib.rs never names psm, it only calls stacker::remaining_stack(), and Debian's librust-stacker-dev 0.1.25 builds against psm 0.1.21, so the older psm should suffice.

Verified ◂

Complete inventory: nine upstream files (Cargo.toml, Cargo.toml.orig, Cargo.lock, .cargo_vcs_info.json, .gitignore, build.rs, src/lib.rs, README.md, LICENSE-APACHE, LICENSE-MIT) plus debian/; .pc/ and debian/cargo-checksum.json not read. All of them read or, for LICENSE-APACHE, read in the relevant parts (header, body, appendix notice).
Files listed by the prescan: none except the holder comparison, which reports every holder it found already named in debian/copyright; LICENSE-APACHE's Copyright 2026 Tomas Tauber (line 189) and Cargo.toml's authors = ["Tomas Tauber <me@tomtau.be>"] are both represented by the Files: * Copyright field.
debian/copyright: DEP-5, correct Format URL; Files: * covers the whole tree including both licence files and Cargo.lock/Cargo.toml.orig; Expat text is reproduced in full (it is not in /usr/share/common-licenses) and Apache-2.0 points there; debian/* covered by its own stanza with the two Debian holders. Expat or Apache-2.0 is a valid DEP-5 expression and matches upstream's MIT OR Apache-2.0.
Licence evidence across the tree: the only statements are LICENSE-MIT (plain Expat grant, no holder line), LICENSE-APACHE (Apache-2.0 plus Copyright 2026 Tomas Tauber), debian/copyright and its .debcargo.hint template; no SPDX tags, no third-party code, no vendored libraries, no fonts or images, no built or minified files, no generated source without its input (src/lib.rs and build.rs are plain, original source).
debian/patches: series holds only auto/auto-remove-targets.patch, a debcargo remove_targets patch dropping the darwin/msvc target dependency tables from Cargo.toml while Cargo.toml.orig keeps them; consistent with Debian building on Linux only and not a licence change.
debian/rules: dh $@ --buildsystem cargo with override_dh_auto_test: dh_auto_test -- test --all; at compat 13 dh skips this override under nocheck, so the <!nocheck> markers on the build dependencies are correct.
debian/control: Build-Depends-Arch uses cargo:native/rustc:native/libstd-rust-dev, dependency on librust-stacker-0.1+default-dev (>= 0.1.25) is satisfied by librust-stacker-dev 0.1.25-1 (checked with apt-cache), Breaks rustc (<< 1.83~) matches rust-version 1.83, and the Provides set covers -dev, +default-dev and +stack-guard-dev for the unversioned, 1, 1.0 and 1.0.1 forms.
Standards-Version 4.7.4 is current: the reviewing system's Policy is 4.7.4.1.
Changelog: version 1.0.1-1 for unstable with a matching date and a truthful debcargo provenance line; source format 3.0 (quilt).
debian/tests/control: four cargo-auto-test entries (all-features, default, stack-guard, no-default-features) matching the debcargo template, each with dh-cargo and rustc >= 1.83 in Depends.
uscan found the packaged version as the newest upstream release (upstream 1.0.1, packaged 1.0.1).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed ◂

The --all-features autopkgtest entry has no Architecture: !riscv64 restriction while the stack-guard and no-default-features entries do. If stacker/psm do not support riscv64, that test would fail there; I could not verify their riscv64 support (no crate sources on the reviewing system). A build on riscv64 would show whether the restriction belongs on the first entry too.
debian/copyright gives the copyright year 2026 for upstream, which matches the LICENSE-APACHE notice but not the upstream git history (the crate's .cargo_vcs_info.json only records a commit id); the year cannot be confirmed from the package alone.

Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package