DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: rust-polars-arrow-format 0.2.1-1

Package Information

DescriptionRust bindings for Apache Arrow IPC and Flight data - Rust source code

Apache Arrow defines a column-oriented memory format for tabular data and protocols for exchanging that data between applications.

This crate provides generated Rust types for Arrow's interprocess communication (IPC) format, using Planus for FlatBuffers serialization. The flight-data feature provides Protocol Buffers messages for Arrow Flight using Prost.

It is maintained as part of the Polars ecosystem. Source code for Debianized Rust crate "polars-arrow-format"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed BySteffen Moeller <moeller@debian.org>
Sponsormoeller@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/polars-arrow-format] (browse)
Closes#1147539
Trackerhttps://tracker.debian.org/pkg/rust-polars-arrow-format
Uploaded1 day ago

New Package Report

.changes◂
Changed-BySteffen Moeller <moeller@debian.org>
Architecturesource amd64
Distributionunstable
DateFri, 06 Nov 2026 15:33:00 +0100
Sourcerust-polars-arrow-format
Version0.2.1-1
Changelog◂
rust-polars-arrow-format (0.2.1-1) unstable; urgency=medium
 .
   * Initial upload (Closes: #1147539)
   * Package polars-arrow-format 0.2.1 from crates.io using debcargo 2.8.4
 .
   * Use Debian's Prost 0.14 for Flight data messages.
   * Defer Flight service bindings requiring obsolete Tonic 0.8.
   * Add IPC and Flight-data serialization round-trip tests.
   * Port the IPC bindings to Debian's Planus 1.3.0 runtime after verifying
     runtime source compatibility and cross-version serialization.
   * Declare dependencies needed to build and test both supported interfaces.
   * Attribute Debian's compatibility tests and remove obsolete Flight service
     modules and documentation.
.dsc◂
Priorityoptional
Componentmain
Package-Listlibrust-polars-arrow-format-dev deb rust optional arch=any
Sectionrust
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: polars-arrow-format
Upstream-Contact: Jorge C. Leitao <jorgecarleitao@gmail.com>
Source: https://github.com/pola-rs/arrow-format

Files: *
Copyright:
 2022-2025 Jorge C. Leitao <jorgecarleitao@gmail.com>
License: Apache-2.0

Files: debian/* tests/debian_compat.rs tests/debian_planus.rs
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Steffen Moeller <moeller@debian.org>
License: Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 day ago.

Report◂

DFSG NEW review for rust-polars-arrow-format version 0.2.1-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The tree is Apache-2.0 throughout: LICENSE is the Apache text with Copyright 2020-2022 Jorge C. Leitão, both manifests say license = "Apache-2.0", and no other holder, licence wording or non-free clause appears anywhere. debian/copyright is DEP-5; its Files: * covers every upstream file and names that holder, its second stanza attributes both Debian-written tests (which the patch series adds) and everything under debian/, and the stand-alone License: Apache-2.0 paragraph points to /usr/share/common-licenses/Apache-2.0, where the text is. The two large files that are generated rather than written (src/ipc/generated.rs from Apache Arrow's .fbs via planus, src/flight/data.rs from Arrow's Flight.proto via prost) are themselves readable, editable Rust under the same licence, so nothing lacks a modifiable form.

Packaging

Textbook debcargo output for the Rust team: debhelper compat 13 with dh-sequence-cargo and debhelper's cargo buildsystem, one Architecture: any, Multi-Arch: same, source-only package, per-feature autopkgtests, DEP-3 patches whose rationale is written up in debian/README.source, Vcs-* fields, upstream metadata and Standards-Version 4.7.4 (current). The Debian changes are coherent: the Planus pin moves together in Cargo.toml, Cargo.toml.orig and the generated version assertion, and matches the (>= 1.3.0), (<< 1.3.1) bounds in Build-Depends-Arch and Depends; prost 0.14 replaces 0.11; the tonic-0.8-only Flight service module and the full/flight-service features are dropped consistently from the manifests, module declarations, README and Provides. Every Build-Depends, Build-Depends-Arch and Depends relationship exists in unstable.

Issues

None.

Verified ◂
  • Prescan holder check: the only copyright holder in the tree is Jorge C. Leitao (Cargo.toml.orig:8 authors, LICENSE appendix), and debian/copyright names him in Files: *; no unnamed holder was found. Scanned all 14 files of the tree apart from .pc/.
  • LICENSE is the unmodified Apache-2.0 text; debian/copyright points at /usr/share/common-licenses/Apache-2.0 for the licence body, which is where Debian keeps it, so no licence text is missing.
  • debian/copyright Files: * gives the years 2022-2025 while the only notice in the tree says Copyright 2020-2022 Jorge C. Leitão; holder and licence are right and this is year-range drift only, so not reported.
  • src/ipc/generated.rs (19,965 lines, sampled at head) is planus output — its header names File.fbs, Schema.fbs, Message.fbs, SparseTensor.fbs, Tensor.fbs, and generate.sh shows it is built by fetching those from apache/arrow and running planus; src/flight/data.rs (243 lines) is prost output, headed Generated code of protobuf (Flight.proto). The schema inputs are not in the crate, as upstream ships only the generated Rust; both files are plain readable Rust under Apache-2.0 and can be edited directly, so this is not a source-availability problem and neither is a built or minified file.
  • tests/debian_compat.rs and tests/debian_planus.rs are Debian-written, added by debian/patches/debian-features.patch and debian/patches/planus-compat-tests.patch; both are attributed in the second debian/copyright stanza, which also covers debian/* (patches and packaging included).
  • apt-cache: librust-planus-dev 1.3.0-1 provides librust-planus-1.3+default-dev (= 1.3.0-1), satisfying both the unversioned and the (<< 1.3.1) Depends entry and the (>= 1.3.0), (<< 1.3.1) Build-Depends-Arch bounds against the patched planus = "=1.3.0"; librust-prost-0.14+default-dev and librust-prost-derive-0.14+default-dev are provided by librust-prost-dev/librust-prost-derive-dev 0.14.4-1; dh-cargo 34 satisfies the autopkgtests' dh-cargo (>= 33~).
  • compat 13: the debhelper tool confirms dh skips override and hook targets of dh_auto_test under DEB_BUILD_OPTIONS=nocheck, so debian/rules:5 needs no nocheck check of its own.
  • /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm build only copies sources for a library package and test is what runs cargo; a nocheck build therefore compiles nothing, which makes cargo:native, rustc:native and libstd-rust-dev <!nocheck> correct rather than a broken clean build.
  • All four patches in debian/patches/series carry DEP-3 headers (Description, Author, Forwarded, Last-Update); debian/README.source explains the Planus 1.3.0 port, the removal of the Flight service module and the test coverage, and is consistent with the patches as applied.
  • debian/rules dh_auto_test -- test --all-features compiles both supported interfaces, and the two [[test]] entries with required-features keep the Debian tests out of the feature lanes that cannot build them; debian/tests/control has a test per Provides feature.
  • Standards-Version 4.7.4 is current: the policy tool's upgrading checklist ends at 4.7.4. debian/changelog version 0.2.1-1 matches the .dsc, distribution unstable, and its date (Fri, 06 Nov 2026) is a Friday.
  • Package split, fields and substvars: one librust-polars-arrow-format-dev, Section: rust, Multi-Arch: same, ${misc:Depends} used; the package installs only Rust source, so there is nothing for dh_shlibdeps to put in ${shlibs:Depends} (as debian/README.source notes).
  • uscan found the packaged version as the newest upstream release (upstream 0.2.1, packaged 0.2.1).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).
Not confirmed ◂
  • Seven of the nine autopkgtests in debian/tests/control carry Architecture: !riscv64 and nothing in the package records why; whether those feature tests still fail or time out on riscv64 could not be checked here.
  • The claim in debian/README.source and in debian/patches/planus-1.3.patch that Planus 1.1.1 and 1.3.0 differ in production code only by the version assertion cannot be verified on the reviewing system: Planus 1.1.1 is not available and no build or test is run.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 day ago.

Review Information

accepted — allocated to mechtilde 1 day ago, started 1 day ago, completed 1 day ago.

Final Comment

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
0.2.1-1 53e2e838… 2026-11-06 08:59 2026-11-06 08:59 dfsg-uploader rejected VIEW

Back to Dashboard | View all reviews for this package