DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-wasm-sync 0.1.2-1

Package Information

DescriptionSynchronization primitives for both web and native - Rust source code

Provides mutexes, condition variables, read-write locks and one-time initialization primitives for native applications and WebAssembly.

On native platforms these types re-export Rust's standard-library synchronization primitives. With WebAssembly atomics enabled, the browser implementation avoids blocking waits on the main thread by busy-spinning; worker threads can still use atomic waits. This allows libraries such as Rayon to use the same synchronization interface across these environments.

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed BySteffen Moeller <moeller@debian.org>
Sponsormoeller@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/wasm-sync] (browse)
Closes#1152974
Trackerhttps://tracker.debian.org/pkg/rust-wasm-sync
Uploaded2 hours ago

New Package Report

.changes◂
Sourcerust-wasm-sync
Version0.1.2-1
Changed-BySteffen Moeller <moeller@debian.org>
Architecturesource amd64
Distributionunstable
DateTue, 03 Nov 2026 22:03:34 +0100
Changelog◂
rust-wasm-sync (0.1.2-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1152974).
   * Package wasm_sync 0.1.2 from crates.io using debcargo 2.8.4
.dsc◂
Componentmain
Package-Listlibrust-wasm-sync-dev deb rust optional arch=any
Sectionrust
Priorityoptional
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: wasm_sync
Upstream-Contact: Douglas Dwyer <dougmdwyer@hotmail.com>
Source: https://github.com/DouglasDwyer/wasm_sync

Files: *
Copyright:
 2026 Douglas M. Dwyer <dougmdwyer@hotmail.com>
License: MIT or Apache-2.0

Files: src/wasm.rs
Copyright:
 2023-2024 Douglas Dwyer <dougmdwyer@hotmail.com>
 The Rust Project Contributors
License: MIT or Apache-2.0
Comment:
 Contains code and documentation adapted from Rust's standard-library
 synchronization primitives. For example, extensive OnceLock implementation
 and Condvar documentation passages match these Rust 1.71.0 sources:
 https://github.com/rust-lang/rust/blob/1.71.0/library/std/src/sync/once_lock.rs
 https://github.com/rust-lang/rust/blob/1.71.0/library/std/src/sync/condvar.rs
 Rust's COPYRIGHT notice states that contributors retain copyright and
 licenses these files under MIT or Apache-2.0. The inspected source files
 do not state per-file copyright years:
 https://github.com/rust-lang/rust/blob/1.71.0/COPYRIGHT

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Steffen Moeller <moeller@debian.org>
License: MIT or Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0

License: MIT
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-wasm-sync version 0.1.2-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The crate declares MIT OR Apache-2.0 in Cargo.toml/Cargo.toml.orig and nothing in the tree carries a contrary notice (no per-file Copyright/(C)/SPDX lines at all), so one catch-all stanza suffices. debian/copyright is DEP-5, has the MIT text inline and Apache-2.0 pointed at /usr/share/common-licenses, and its extra Files: src/wasm.rs paragraph correctly records the second provenance of that file: the OnceLock implementation and the Condvar/Once/RwLock documentation are lifted from Rust 1.71.0's library/std, which Debian's own rust copyright licenses MIT or Apache-2.0 under The Rust Project Developers - compatible with the crate's licence and named in the stanza. Both licence short names have their own stand-alone License paragraph, and no DFSG-problem wording or non-free file exists in the tree.

Packaging

This is a straight debcargo 2.8.4 generated package and it is correct: debhelper compat 13 with dh-sequence-cargo, Standards-Version 4.7.4 (Policy here is 4.7.4.1), Vcs-* on debcargo-conf, a single arch:any Multi-Arch: same librust-wasm-sync-dev with the right Provides set, no patches, no maintainer scripts and nothing built or installed by hand. All three target-specific crate dependencies exist in the archive at versions that satisfy the constraints, dh-cargo is at 34 so the autopkgtest dependency is met, the test suite is run both at build time (dh_auto_test -- test --all, which I confirmed runs cargo test) and in autopkgtest, and the changelog is a sane 0.1.2-1 to unstable closing the ITP.

Issues

None.

Verified ◂
  • Read every upstream file in the tree: Cargo.toml, Cargo.toml.orig, README.md, .gitignore, .cargo_vcs_info.json, src/lib.rs, src/native.rs and all 1581 lines of src/wasm.rs; plus all of debian/ except cargo-checksum.json and watch.
  • The tree is exactly the two tarballs: wasm_sync-0.1.2/ in the .orig.tar.gz has the same six entries plus src/, and the .debian.tar.xz has the same eleven entries as debian/ (no debian/patches, no maintainer scripts, no install/docs files).
  • Licence evidence: grep for Copyright, (C), ©, SPDX-License-Identifier, LICENSE, 'Permission is hereby', GNU/Apache/Mozilla/MPL, 'All rights reserved', 'public domain', 'Licensed under' over the whole tree finds no notice in any upstream file; the only licence statement is license = "MIT OR Apache-2.0" in Cargo.toml:25 / Cargo.toml.orig:6, which is what debian/copyright records.
  • The scan's author check found no holder that debian/copyright omits, and it listed no files beyond the holder check; nothing else was flagged, and there are no non-free terms, no licence the DFSG rejects, no built or minified files, no PDFs and no vendored third-party code (js-sys, wasm-bindgen and web-sys are plain Cargo dependencies, not embedded).
  • src/wasm.rs is a genuine derivative of Rust 1.71.0's library/std: the OnceLock struct and impl (lines ~1105-1581) including the verbatim comments 'Why do we need T: Send?' and the compile_fail,E0597 doctest, and the Condvar/Once/RwLock doc passages; this is precisely what the Files: src/wasm.rs paragraph and its Comment record, with both holders (Douglas Dwyer, The Rust Project Contributors) named.
  • /usr/share/doc/libstd-rust-dev/copyright confirms Debian licenses library/std (including library/std/src/sync/*) as MIT or Apache-2.0 with The Rust Project Developers - the same terms the stanza claims, so the combined code is licence-compatible.
  • Files: patterns cover the tree: Files: * catches Cargo.toml, Cargo.toml.orig, README.md, .gitignore, .cargo_vcs_info.json, src/lib.rs and src/native.rs; Files: src/wasm.rs (later, so it overrides for that one file) adds the Rust holder; Files: debian/* covers the packaging.
  • Dependencies exist and satisfy the constraints (apt-cache): librust-js-sys-0.3-dev provided by librust-js-sys-dev 0.3.85-1 (needs >= 0.3.67), librust-wasm-bindgen-0.2-dev by librust-wasm-bindgen-dev 0.2.108-1 (needs >= 0.2.90), librust-web-sys-0.3+window-dev by librust-web-sys-dev 0.3.85-1 (needs >= 0.3.24); dh-cargo is 34, so autopkgtest's dh-cargo (>= 33~) holds.
  • debian/rules:14 dh_auto_test -- test --all was checked against /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm, whose test sub shifts the literal test and runs cargo test --all; at compat 13 dh skips that override itself under nocheck, so no check for it is needed.
  • debian/control's ${misc:Depends} is present though not required at compat 13 (14 or later would add it); no ${shlibs:Depends} is needed because the package ships only crate sources.
  • debian/copyright is in DEP-5 with the exact 1.0 Format URL, has Upstream-Name/Upstream-Contact/Source, a stand-alone License paragraph for each of the two short names used, and no Files-Excluded (none is repacked).
  • Standards-Version 4.7.4 matches the reviewing system's Policy 4.7.4.1; debian/changelog is 0.1.2-1 to unstable with a plausible ITP closure; debian/tests/control is debcargo's standard three-test auto-test file; X-Cargo-Crate/X-Cargo-Crate-Version are consistent with the crate name and changelog version.
  • uscan found the packaged version as the newest upstream release (upstream 0.1.2, packaged 0.1.2).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).
Not confirmed ◂
  • Upstream copyright years: the tarball has no VCS history and no per-file notices; Files: * says 2026 while the src/wasm.rs paragraph says 2023-2024 for the same author, so the year for src/lib.rs, src/native.rs and the top-level files could not be verified. Only year drift, so not reported as an issue.
  • The exact string Rust uses for the collective holder (The Rust Project Contributors here, The Rust Project Developers in Debian's rust copyright) could not be checked against rust-lang/rust's own COPYRIGHT file without network access; both describe the same body, so it was not reported.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package