DFSG, Licensing & New Packages Team

licensecheck

Command: licensecheck -r --deb-machine .
Exit code: 0

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: FIXME
Upstream-Contact: FIXME
Source: FIXME
Disclaimer: Autogenerated by licensecheck

Files: ./.cargo_vcs_info.json
 ./Cargo.lock
 ./Cargo.toml
 ./Cargo.toml.orig
 ./README.md
 ./debian/cargo-checksum.json
 ./debian/changelog
 ./debian/control
 ./debian/debcargo.toml
 ./debian/rules
 ./debian/source/format
 ./debian/tests/control
 ./debian/watch
 ./src/lib.rs
 ./src/parents_provider.rs
 ./src/test.rs
 ./src/tsort.rs
Copyright: NONE
License: UNKNOWN
 FIXME

Files: ./debian/copyright
Copyright: 2006-2012, Canonical Ltd.
License: GPL-2
 FIXME

Files: ./debian/copyright.debcargo.hint
Copyright: FIXME (overlay) UNKNOWN-YEARS Martin Packman <gzlist@googlemail.com>
License: GPL-2
 FIXME

debian/copyright check

Command: cme check dpkg-copyright
Exit code: 0

(no output)

licenserecon

Command: licenserecon
Exit code: 0

en: Versions: licenserecon '14.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

No significant differences found

Look for SPDX

Command: grep -r -B1 'SPDX-'
Exit code: 1

(no output)

Lintian

Command: lintian -i -I -v --pedantic
Exit code: 0

N:
W: librust-vcs-graph-dev: initial-upload-closes-no-bugs [usr/share/doc/librust-vcs-graph-dev/changelog.Debian.gz:1]
N: 
N:   This package appears to be the first packaging of a new upstream software
N:   package (there is only one changelog entry and the Debian revision is 1),
N:   but it does not close any bugs. The initial upload of a new package should
N:   close the corresponding ITP bug for that package.
N:   
N:   This warning can be ignored if the package is not intended for Debian or
N:   if it is a split of an existing Debian package.
N: 
N:   Please refer to New packages (Section 5.1) in the Debian Developer's
N:   Reference for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/changelog
N:   Renamed from: new-package-should-close-itp-bug
N: 
N:
W: librust-vcs-graph-dev: synopsis-too-long
N: 
N:   The first line of the "Description:" must be less than 80 characters long.
N: 
N:   Please refer to The single line synopsis (Section 3.4.1) in the Debian
N:   Policy Manual for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: fields/description
N:   Renamed from: description-too-long
N: 
N:
W: rust-vcs-graph source: testsuite-restrictions-has-deprecated-skip-not-installable [debian/tests/control]
N: 
N:   This package's autopkgtest testsuite uses the skip-not-installable
N:   restriction, which is now deprecated.
N:   
N:   If you wish to skip certain architectures, please use the Architecture
N:   field instead.
N:   
N:   See-Also: /usr/share/doc/autopkgtest/README.package-tests.rst.gz
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: testsuite
N: 
N:
I: librust-vcs-graph-dev: extended-description-is-probably-too-short
N: 
N:   The extended description (the lines after the first line of the
N:   "Description:" field) is only one or two lines long. The extended
N:   description should provide a user with enough information to decide
N:   whether they want to install this package, what it contains, and how it
N:   compares to similar packages. One or two lines is normally not enough to
N:   do this.
N: 
N:   Please refer to General guidelines for package descriptions (Section
N:   6.2.1) in the Debian Developer's Reference and The long description
N:   (Section 6.2.3) in the Debian Developer's Reference for details.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: fields/description
N: 
N:
I: rust-vcs-graph source: file-contains-fixme-placeholder FIXME [debian/control:19]
N: 
N:   This file appears to be incomplete or insufficiently modified as it
N:   contains a "FIXME" placeholder text. These can often be generated by
N:   package generation tools such as dh_make or npm2deb.
N:   
N:   Please double-check the file and replace the placeholder with the required
N:   command or information.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: dh-make
N: 
N:
I: rust-vcs-graph source: out-of-date-standards-version 4.7.3 (released 2025-12-23) (current is 4.7.4)
N: 
N:   The source package refers to a Standards-Version older than the one that
N:   was current at the time the package was created (according to the
N:   timestamp of the latest debian/changelog entry). Please consider updating
N:   the package to current Policy and setting this control field
N:   appropriately.
N:   
N:   If the package is already compliant with the current standards, you don't
N:   have to re-upload the package just to adjust the Standards-Version control
N:   field. However, please remember to update this field next time you upload
N:   the package.
N:   
N:   See /usr/share/doc/debian-policy/upgrading-checklist.txt.gz in the
N:   debian-policy package for a summary of changes in newer versions of
N:   Policy.
N: 
N:   Please refer to
N:   https://www.debian.org/doc/debian-policy/upgrading-checklist.html for
N:   details.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: fields/standards-version
N: 
N:
I: librust-vcs-graph-dev: package-contains-documentation-outside-usr-share-doc [usr/share/cargo/registry/vcs-graph-3.4.0/README.md]
N: 
N:   This package ships a documentation file outside /usr/share/doc
N:   Documentation files are normally installed inside /usr/share/doc.
N:   
N:   If this file doesn't describe the contents or purpose of the directory it
N:   is in, please consider moving this file to /usr/share/doc/ or maybe even
N:   removing it. If this file does describe the contents or purpose of the
N:   directory it is in, please add a lintian override.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: documentation
N: 
N:   Screen: python/egg/metadata
N:     Advocates: "Scott Kitterman" <debian@kitterman.com>
N:     Reason: The folders XXX.dist-info/ and XXX.egg-info/ hold metadata for
N:             Python modules. Those files are not documentation even though
N:             some of their names carry the .txt file extension.
N:             
N:             Python modules can be both public and private.
N:             
N:             Read more in
N:             https://www.python.org/dev/peps/pep-0427/#the-dist-info-directory,
N:             https://www.python.org/dev/peps/pep-0376/#id16,
N:             https://www.python.org/dev/peps/pep-0610/,
N:             https://www.python.org/dev/peps/pep-0639/,
N:             https://setuptools.pypa.io/en/latest/deprecated/python_eggs.html,
N:             and Bug#1003913.
N: 
N:
P: rust-vcs-graph source: upstream-metadata-file-is-missing
N: 
N:   This source package is not Debian-native but it does not have a
N:   debian/upstream/metadata file.
N:   
N:   The Upstream MEtadata GAthered with YAml (UMEGAYA) project is an effort to
N:   collect meta-information about upstream projects from any source package.
N:   This file is in YAML format and it is used in to feed the data in the
N:   UltimateDebianDatabase. For example, it can contains the way the authors
N:   want their software be cited in publications and some bibliographic
N:   references about the software.
N:   
N:   Please add a debian/upstream/metadata file.
N: 
N:   Please refer to https://dep-team.pages.debian.net/deps/dep12/ and
N:   https://wiki.debian.org/UpstreamMetadata for details.
N: 
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: debian/upstream/metadata
N: 

duck

Command: duck
Exit code: 0

I: debian/control: Homepage: https://www.breezy-vcs.org/: INFORMATION (Certainty:wild-guess)
   Curl:0 HTTP:200 No error 
   Website seems to be outdated, is probably a parked domain or for sale. Please update your links!
   Matching regular expression(s):
    m/\bhave a look at\b/i

look for copyright

Command: egrep -R -i copyright
Exit code: 0

debian/copyright.debcargo.hint:Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
debian/copyright.debcargo.hint:Copyright:
debian/copyright.debcargo.hint: FIXME (overlay): Since upstream copyright years are not available in
debian/copyright.debcargo.hint:Copyright:
debian/copyright:Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
debian/copyright:Copyright:
debian/copyright:Copyright:

look for license

Command: egrep -R -i license
Exit code: 0

Cargo.toml.orig:license = "GPL-2.0-or-later"
Cargo.toml:license = "GPL-2.0-or-later"
debian/copyright.debcargo.hint:License: GPL-2.0-or-later
debian/copyright.debcargo.hint:License: GPL-2.0-or-later
debian/copyright.debcargo.hint:License: GPL-2.0-or-later
debian/copyright.debcargo.hint: Debian systems provide the GPL 2.0 in /usr/share/common-licenses/GPL-2
debian/copyright:License: GPL-2.0-or-later
debian/copyright:License: GPL-2.0-or-later
debian/copyright:License: GPL-2.0-or-later
debian/copyright: Debian systems provide the GPL 2.0 in /usr/share/common-licenses/GPL-2
README.md:## License