Review: rust-unsynn 0.3.0-1

Package Information

Description	(Proc-macro) parsing made easy - Rust source code Source code for Debianized Rust crate "unsynn"
Maintainer	Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed By	Alexander Kjäll <alexander.kjall@gmail.com>
Distribution	unstable
Architecture	any
VCS	git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/unsynn] (browse)
Tracker	https://tracker.debian.org/pkg/rust-unsynn
Uploaded	28 days ago

New Package Report

.changes◂

Source	rust-unsynn
Version	0.3.0-1
Changed-By	Alexander Kjäll <alexander.kjall@gmail.com>
Architecture	amd64 source
Distribution	unstable
Date	Sat, 10 Oct 2026 22:24:43 +0000

Changelog◂

rust-unsynn (0.3.0-1) unstable; urgency=medium
 .
   * Package unsynn 0.3.0 from crates.io using debcargo 2.8.5+alpha.0

.dsc◂

Section	rust
Priority	optional
Component	main
Package-List	librust-unsynn-dev deb rust optional arch=any

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: unsynn
Upstream-Contact: Christian Thäter <ct@pipapo.org>
Source: https://seed.pipapo.org/nodes/seed.pipapo.org/rad:z39WbeupErKS8TwbDS5yU8eZSa3C

Files: *
Copyright: 2024-2026 Christian Thäter <ct@pipapo.org>
License: MIT or Apache-2.0

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Alexander Kjäll <alexander.kjall@gmail.com>
License: MIT or Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 24 days ago.

Report◂

DFSG NEW review for rust-unsynn version 0.3.0-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 0 minor
debian/watch: version 5
debian/copyright: machine-readable

Licensing

Upstream is dual-licensed MIT OR Apache-2.0 (Cargo.toml:45 and Cargo.toml.orig:8), confirmed by the shipped LICENSE-MIT (Expat text) and LICENSE-APACHE (Apache-2.0) files, both of which are DFSG-free and mutually compatible. debian/copyright is machine-readable (DEP-5, correct Format URL), and its two Files stanzas (* and debian/*) correctly cover every file in the unpacked tree, naming the sole upstream holder Christian Thäter and the Debian contributors. The full MIT text is reproduced in the stand-alone paragraph and Apache-2.0 is referred to /usr/share/common-licenses/Apache-2.0, so nothing a license requires is missing. No other copyright holders, no other license text, no non-free terms, no vendored third-party code and no binaries/minified or generated artifacts are present.

Packaging

This is a stock debcargo-generated package and the packaging is sound: debian/control uses debhelper-compat 13 with dh-sequence-cargo, correct Build-Depends-Arch, Architecture: any with Multi-Arch: same for the -dev package, and a debcargo-tuned debcargo.toml that sensibly marks the feature-less and single-feature test builds as broken while keeping lib+@, lib+default and lib+proc_macro2 enabled. debian/rules, debian/source/format (3.0 quilt), debian/patches/series, debian/tests/control, debian/upstream/metadata and the changelog are all consistent, Standards-Version 4.7.4 matches the installed Policy, no maintainer scripts exist, and every build/runtime dependency named in the control file resolves in the archive.

Issues

None.

Verified ◂

Read debian/copyright in full: DEP-5 1.0 with the exact https Format URL; stanzas Files: * (2024-2026 Christian Thäter ct@pipapo.org, MIT or Apache-2.0) and Files: debian/* (Debian Rust Maintainers / Alexander Kjäll, MIT or Apache-2.0); stand-alone License: MIT (full Expat text) and License: Apache-2.0 (pointer to /usr/share/common-licenses/Apache-2.0); no Files-Excluded.
Upstream license declared MIT OR Apache-2.0 in Cargo.toml:45 and Cargo.toml.orig:8; LICENSE-MIT contains the unmodified Expat terms and LICENSE-APACHE contains the Apache License 2.0.
Grepped the whole tree including hidden files (.cargo_vcs_info.json, .pc/ excluded) for copyright/©/SPDX/licence markers and for non-free phrases: the only hits are Cargo.toml, the two LICENSE files and debian/. No other copyright holder, no GPL/LGPL/MPL/BSD/CC/Artistic/RFC-style licence, and no non-commercial, no-derivatives or field-of-use clause.
Tree inventory: 19 src/*.rs files plus README/COOKBOOK/CHANGELOG/ROADMAP/HOW-TO-USE-UNSYNN-BY-AI.md, Cargo.toml(.orig), Cargo.lock, .cargo_vcs_info.json and the two licences. No images, fonts, PDFs, .so/.jar/.class/.pyc, no vendor/ or embedded third-party copies; no minified or generated sources. Every file is matched by Files: * or Files: debian/*.
All four files referenced by include_str! in src/lib.rs (README.md, COOKBOOK.md, ROADMAP.md, CHANGELOG.md) are present, so nothing referenced by the source is missing.
Copyright years 2024-2026 are consistent with upstream history in CHANGELOG.md: first release 0.0.0 on 2024-05-24, 0.3.0 on 2025-11-17.
Compared the unpacked tree against rust-unsynn_0.3.0.orig.tar.gz: the only difference is debian/ (added packaging) plus the single applied patch (Cargo.toml criterion 0.7 -> 0.5); no upstream file is modified outside debian/patches.
debian/control: Build-Depends-Arch deps all exist and satisfy the constraints (librust-mutants-0.0+default-dev via librust-mutants-dev 0.0.3-1+b2; librust-proc-macro2-1+default/proc-macro/span-locations-dev via librust-proc-macro2-dev 1.0.107-1; librust-rustc-hash-2+default-dev via librust-rustc-hash-dev 2.1.2-2; librust-criterion-0.5+default-dev via librust-criterion-dev 0.5.1-11; dh-cargo 34 >= 33; libstd-rust-dev/rustc 1.97 >= 1.80.1). Breaks: rustc (<< 1.80.1~) matches the crate MSRV, as in other rust packages.
Reviewed debian/rules (dh --buildsystem cargo, override_dh_auto_test = dh_auto_test -- test --all), debian/changelog (0.3.0-1, unstable, debcargo 2.8.5+alpha.0), debian/source/format (3.0 quilt), debian/patches/series (relax-deps.patch), debian/tests/control (autopkgtest stanzas with correct cargo-auto-test invocations and @ dependency) and debian/upstream/metadata; no maintainer scripts or *.maintscript present. Standards-Version 4.7.4 equals the installed Policy version.
uscan found the packaged version as the newest upstream release (upstream 0.3.0, packaged 0.3.0).

Not confirmed ◂

debian/cargo-checksum.json is degenerate: {"package":"Could not get crate checksum","files":{}} rather than real checksums. It suggests debcargo could not fetch the crate from crates.io (consistent with the radicle-only upstream URL), although the changelog boilerplate says 'from crates.io'. I could not confirm a build impact: dh-cargo copies this file to .cargo-checksum.json, and Debian's cargo builds from a directory source that does not verify files, so I believe it is harmless, but no build was run.
I could not run a build, dh_auto_test or the autopkgtest stanzas, so I verified the dependency and file references statically only.
debian/copyright uses the short name MIT where DEP-5 (copyright-format 1.0, section 7.1) recommends Expat; the text is the Expat licence, so this is a naming preference, not an inaccuracy.

Proposed changes ◂

None.

Review Information

accepted — allocated to awm 23 days ago, started 23 days ago, completed 23 days ago.

Final Comment

Back to Dashboard | View all reviews for this package