DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-zbus-utils 6.1.0-1

Package Information

DescriptionVarious utilities used by the zbus and zgvariant crates - Rust source code

Source code for Debianized Rust crate "zbus_utils"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed BySimon Quigley <tsimonq2@debian.org>
Sponsortsimonq2@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/zbus-utils] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-zbus-utils
Uploaded2 hours ago

New Package Report

.changes◂
Sourcerust-zbus-utils
Version6.1.0-1
Changed-BySimon Quigley <tsimonq2@debian.org>
Architecturesource amd64
Distributionunstable
DateSat, 14 Nov 2026 17:20:26 -0600
Changelog◂ 
rust-zbus-utils (6.1.0-1) unstable; urgency=medium
 .
   * Package zbus_utils 6.1.0 from crates.io using debcargo 2.8.4
.dsc◂
Sectionrust
Priorityoptional
Componentmain
Package-Listlibrust-zbus-utils-dev deb rust optional arch=any
debian/copyright◂ 
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: zbus_utils
Upstream-Contact:
 Zeeshan Ali Khan <zeeshanak@gnome.org>
 turbocooler <turbocooler@cocaine.ninja>
Source: https://github.com/z-galaxy/zbus/

Files: *
Copyright: 2024 Zeeshan Ali Khan & zbus contributors
License: Expat

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 1 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for rust-zbus-utils version 6.1.0-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: No
  • Issues: 0 blocker, 0 important, 1 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 (correct Format URL) with Files: * (Expat, 2024 Zeeshan Ali Khan & zbus contributors) and Files: debian/* (Expat), plus the complete Expat text. The tree's only copyright/licence notice is LICENSE, which carries exactly that holder and the Expat permission text; no source file has a separate notice, and greps for other licences (GPL, LGPL, Apache, MPL, public domain, non-commercial, CC-BY) find nothing but the unknown-linux-gnu doc targets. There is no vendored third-party code, no generated or built file, and no non-DFSG term, so the source is DFSG-free and debian/copyright describes it accurately.

Packaging

The packaging is otherwise clean, standard debcargo 2.8.4 output: correct source/binary stanzas, Multi-Arch: same, dh-sequence-cargo with compat 13, an autopkgtest for every feature combination, sane changelog and Vcs-* fields. But the build-dependency librust-winnow-1+default-dev cannot be satisfied by anything in the archive or in NEW: Debian ships only winnow 0.7.13, while this crate needs winnow 1.0 (Cargo.toml, Cargo.lock 1.0.4), and the same unsatisfiable name is in the binary package's Depends. The package therefore cannot be built as uploaded, and would be uninstallable if it were.

Issues

minor packaging 1. Build-Depends-Arch and Depends name librust-winnow-1+default-dev, which no Debian package provides ◂
  • Files: debian/control:12, debian/control:28, Cargo.toml:70-71, Cargo.lock
  • Basis: checked, in the package or with a reference tool
  • Evidence: control: librust-winnow-1+default-dev <!nocheck> in Build-Depends-Arch and librust-winnow-1+default-dev in the -dev package's Depends; Cargo.toml: [dependencies.winnow]\nversion = "1.0"; Cargo.lock pins winnow 1.0.4. apt-cache: librust-winnow-1+default-dev is provided by nothing, librust-winnow-1-dev is nowhere (also not in NEW); the only winnow in the archive is librust-winnow-dev 0.7.13-1, which provides librust-winnow-0/-0.7/-0.7.13 names only.
  • Problem: The crate depends unconditionally on winnow 1.0 (used by src/names.rs, src/object_path.rs and src/signature/parser.rs), but Debian packages only winnow 0.7.13, whose Provides do not include librust-winnow-1+default-dev and which is semver-incompatible. sbuild cannot install the Build-Depends, so the source cannot build; and because the same name is in librust-zbus-utils-dev's Depends, that binary package would be uninstallable and its autopkgtests would error out if it were built.
  • Fix: Package winnow 1.0.4 (as rust-winnow 1.0, giving librust-winnow-1-dev) before uploading this, or hold the upload until it is accepted; then the existing dependency names are correct and nothing in debian/control needs changing.
Verified ◂
  • Inventory: 25 upstream files — 7 at the top level (.cargo_vcs_info.json, Cargo.lock, Cargo.toml, Cargo.toml.orig, CHANGELOG.md, LICENSE, README.md) and 18 under src/ (case.rs, lib.rs, macros.rs, names.rs, object_path.rs, test_strings.rs, derive/{attrs,dict,mod,signature,type,variant}.rs, signature/{child,error,fields,mod,parser,tests}.rs). All are upstream's own Rust source or cargo metadata; there are no images, fonts, archives, PDFs or built files.
  • The only copyright notice in the tree is LICENSE:1 Copyright (c) 2024 Zeeshan Ali Khan & zbus contributors with the Expat permission text. Files: * in debian/copyright names that holder and the same licence, so the notice the licence requires to be kept is represented. turbocooler appears only in Cargo.toml's authors list, not as a separate notice; & zbus contributors covers it.
  • grep over the whole tree (gitignore: false, .pc excluded) for Copyright, (C), ©, SPDX-License-Identifier, Licensed under, Permission is hereby granted, GNU, LGPL, Apache, Mozilla, public domain, All rights reserved, non-commercial and CC-BY matched only LICENSE and the debian/ files; the only GNU hits are the x86_64-unknown-linux-gnu docs.rs targets in Cargo.toml/Cargo.toml.orig.
  • debian/copyright's stand-alone License: Expat paragraph reproduces the full Expat/MIT text, so no pointer to /usr/share/common-licenses is needed; both stanzas use the same correct short name (Expat, not MIT) for the text found in LICENSE and Cargo.toml (license = "MIT").
  • debian/copyright.debcargo.hint is debcargo's overlay input, not the shipped copyright: its FIXME (overlay) copyright years and License: UNKNOWN-LICENSE; FIXME (overlay) for LICENSE are resolved in debian/copyright, where LICENSE's text is correctly identified as Expat.
  • Every other build-dependency is satisfiable (apt-cache): librust-syn-3+default/extra-traits/full-dev via librust-syn-dev 3.0.9-1, librust-proc-macro2-1+default-dev via 1.0.107-1 (>= 1.0.81), librust-quote-1+default-dev via 1.0.47-1 (>= 1.0.36), librust-serde-1+default/derive-dev via 1.0.229-1 (>= 1.0.200), libstd-rust-dev via rustc 1.98.1, dh-sequence-cargo via dh-cargo 34.
  • The <!nocheck> markers do not break a nocheck build: dh-cargo Depends on cargo, cargo Depends on rustc, rustc Depends on libstd-rust-dev, so the tools the buildsystem's configure needs (cargo prepare-debian in /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm) are installed anyway; the librust-* deps are needed only by the dh_auto_test -- test --all override, which dh skips under DEB_BUILD_OPTIONS=nocheck at compat 13, so debian/rules need not check it itself.
  • debian/rules (compat 13, ${misc:Depends} present in Depends as required below compat 14; debhelper 14.5 still provides debhelper-compat (= 13)) and debian/source/format 3.0 (quilt) with no debian/patches are consistent; there are no maintainer scripts, .install/.links/.docs files or maintscripts.
  • debian/control: Standards-Version 4.7.4 against Policy 4.7.4.1 (first two components 4.7 match, so current); changelog version 6.1.0-1, distribution unstable, urgency medium, no bug closures, text matching debcargo's generated entry; Vcs-Git/Vcs-Browser point at debcargo-conf with the [src/zbus-utils] subdirectory; X-Cargo-Crate/X-Cargo-Crate-Version match Cargo.toml's zbus_utils 6.1.0; Provides lists all default/gvariant feature and version aliases for a collapse_features = true crate.
  • debian/tests/control uses cargo-auto-test for all features, default features, gvariant and no-default-features, with dh-cargo (>= 33~) and rustc (>= 1.89), and autodep8 adds Testsuite: autopkgtest/Testsuite-Triggers in the .dsc — the layout debcargo generates; the four test entries are the only ones the package needs.
  • uscan found the packaged version as the newest upstream release (upstream 6.1.0, packaged 6.1.0).
Not confirmed ◂
  • debian/tests/control:14 and :19 restrict the gvariant and --no-default-features tests to Architecture: !riscv64. Nothing in debian/debcargo.toml, Cargo.toml or the source explains it, and debcargo 2.8.4 is not installed here, so I could not check whether its generator adds this restriction itself; if it does not, those two test variants silently never run on riscv64 (a test-coverage question, not a policy violation).
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 1 hour ago.

Back to Dashboard | View all reviews for this package