DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-ruby-rbs-sys 0.3.0+ds-1

Package Information

DescriptionLow-level FFI bindings for RBS - Rust source code

Source code for Debianized Rust crate "ruby-rbs-sys"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed BySimon Quigley <tsimonq2@debian.org>
Sponsortsimonq2@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/ruby-rbs-sys] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-ruby-rbs-sys
Uploaded2 hours ago

New Package Report

.changes◂
Distributionunstable
DateFri, 06 Nov 2026 21:13:00 -0600
Sourcerust-ruby-rbs-sys
Version0.3.0+ds-1
Changed-BySimon Quigley <tsimonq2@debian.org>
Architecturesource amd64
Changelog◂
rust-ruby-rbs-sys (0.3.0+ds-1) unstable; urgency=medium
 .
   * Package ruby-rbs-sys 0.3.0 from crates.io using debcargo 2.8.4
.dsc◂
Sectionrust
Priorityoptional
Componentmain
Package-Listlibrust-ruby-rbs-sys-dev deb rust optional arch=any
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: ruby-rbs-sys
Upstream-Contact: Soutaro Matsumoto <matsumoto@soutaro.com>
Source: https://github.com/ruby/rbs.git
Comment:
 vendor/ is excluded from the upstream tarball (+ds). The RBS C
 library is taken from the Debian ruby-rbs package.

Files: *
Copyright: 2019 Soutaro Matsumoto <matsumoto@soutaro.com>
License: BSD-2-Clause

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: BSD-2-Clause

License: BSD-2-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice, this
 list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
 this list of conditions and the following disclaimer in the documentation
 and/or other materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-ruby-rbs-sys version 0.3.0+ds-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

DEP-5 file with the correct Format URL. Files: * (BSD-2-Clause, 2019 Soutaro Matsumoto) covers all eight upstream files, and a grep of the whole tree for copyright/licence wording (Copyright, (C), ©, SPDX-License-Identifier, GNU ..., Permission is hereby granted, ...) finds no notice that contradicts it; the crates.io tarball carries no LICENSE/COPYING at all, and the Cargo.toml license field (BSD-2-Clause) is reproduced in full in the file, so the notice requirement is met. debian/* is covered by a later stanza (Debian Rust Maintainers, Simon Quigley, BSD-2-Clause), which matches the patch author. The RBS C library that upstream vendors under vendor/ is removed by the +ds repack and taken from Debian's ruby-rbs source instead (documented in the header Comment); it is BSD-2-Clause/Ruby-licensed and compatible, so nothing non-free remains and no files lack a licence.

Packaging

debcargo-generated Rust crate package, done the way the Rust team does it: debhelper-compat (= 13) with dh-sequence-cargo, one arch:any Multi-Arch: same -dev package with the usual Provides set and Depends on the build-time requirements of the crate (librust-bindgen, librust-cc, ruby, ruby-rbs (>= 4.2.0), (<< 4.3.0)), autopkgtests using cargo-auto-test, Standards-Version: 4.7.4, Vcs-* pointing at debcargo-conf, a current unstable changelog. The single patch is DEP-3-tagged, marked not for forwarding (it is Debian-specific: build against the system rbs instead of the vendored copy), and its dh-cargo:deb-built-using=rbs=0=... line is in the form dh-cargo's /usr/share/cargo/bin/dh-cargo-built-using parses; 0 is right since neither the BSD-2-Clause crate nor the Ruby-licensed rbs sources need their source retained (Policy 7.8), and for a lib-only package that helper is only run as a check, so no substvar in control is required. Only caveat, which a build would settle, is that the patched build.rs needs the installed gem to ship src/ and include/.

Issues

None.

Verified ◂
  • Upstream inventory is eight files (.cargo_vcs_info.json, Cargo.lock, Cargo.toml, Cargo.toml.orig, README.md, build.rs, wrapper.h, src/lib.rs); all are matched by Files: *, and debian/* (including debian/patches/use-system-rbs.patch, debian/source/format, debian/tests/control, debian/upstream/metadata) by the later debian/* stanza.
  • Grep for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU (General|Lesser), Apache License, Mozilla Public, public domain, All rights reserved over the whole upstream tree found nothing; there is no LICENSE/COPYING/AUTHORS file in the tarball, so debian/copyright is the only licence statement, and it contains the complete BSD-2-Clause text needed for that.
  • The prescan's dfsg-author-check reports every holder it found is named in debian/copyright; nothing in the tree contradicts the single holder claimed for Files: *.
  • The +ds tarball drops vendor/ (the RBS C library that upstream vendors); the header Comment documents this and says the library comes from Debian's ruby-rbs. Those sources are BSD-2-Clause/Ruby-licensed (the rbs gem ships BSDL/COPYING), compatible with BSD-2-Clause, and their source is in the archive (ruby-rbs 4.2.0-1, in NEW), so no non-free or unlicensed material is shipped and nothing lacks its preferred form.
  • No binary, generated, minified or documentation-from-absent-source files in the tree; the only generated files are Cargo.lock/.cargo_vcs_info.json, whose input Cargo.toml is present.
  • librust-ruby-rbs-sys-dev is the only binary: arch=any, Multi-Arch: same, Section rust inherited, ${misc:Depends} present; X-Cargo-Crate/X-Cargo-Crate-Version match the crate, and the Provides set is the usual debcargo one.
  • Build-Depends-Arch deps exist in the archive: librust-bindgen-0.72+default-dev = librust-bindgen-dev 0.72.1-5, librust-cc-1+default-dev = librust-cc-dev 1.2.60-1, ruby = 1:3.3+support3.4~1, dh-sequence-cargo = dh-cargo 34. bindgen needs libclang: librust-bindgen-dev depends on librust-clang-sys-1+runtime-dev, and librust-clang-sys-dev depends on libclang-dev, llvm, clang, so no separate clang Build-Depends is missing.
  • ruby-rbs is a virtual package provided by libruby3.3 (= 3.4.0) and libruby3.4 (= 3.8.0), which do not satisfy (>= 4.2.0); the requirement is built by source package ruby-rbs 4.2.0-1, currently in NEW, so the dependency is satisfiable at acceptance time rather than broken.
  • Standards-Version: 4.7.4 is current (Policy 4.7.x), and Vcs-Git/Vcs-Browser point at debcargo-conf at src/ruby-rbs-sys.
  • debian/rules passes test to dh_auto_test, which per /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm (sub test) runs cargo test --all and then dh-cargo-built-using; at compat 13 dh skips this override under nocheck, so no nocheck check is needed in the target.
  • Read /usr/share/cargo/bin/dh-cargo-built-using: it parses dh-cargo:deb-built-using=<lib>=[01]=<path>, looks the path up with dpkg and emits Built-Using only for 1=; the patch's 0= for the gem directory is well-formed and, for a lib-only package, the helper is invoked without a binary package name and writes no substvars, which is why debian/control has no ${cargo:Built-Using} placeholders.
  • The patch is applied (debian/patches/series, .pc/applied-patches), carries Description/Author/Origin/Forwarded/Last-Update headers, and changes only build.rs (locate the system gem, compile its C sources, emit the dh-cargo built-using hint).
  • debian/changelog: unstable, version 0.3.0+ds-1 matching the tarball (+ds for the removed vendor/), entry by the Uploader, dated 2026-11-06.
  • No maintainer scripts, .maintscript, .install/.links/.dirs files are needed; nothing is installed outside the dh-cargo registry path.
  • uscan found the packaged version as the newest upstream release (upstream 0.3.0, packaged 0.3.0+ds).
Not confirmed ◂
  • The patched build.rs system_rbs_root() asserts that the installed rbs gem contains src/ and include/ directories. The rbs gems installed on this system from libruby3.3/ruby3.3 (3.4.0) and older ruby (2.1.0, 1.4.0) contain neither, their C extension having been built and the ext/+src/+include/ sources stripped. If Debian's ruby-rbs 4.2.0-1 (source package in NEW, contents not inspectable here) is packaged the same way, the assert panics and both the build and the autopkgtest fail; a build with ruby-rbs 4.2.0-1 installed would show which it is.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package