DFSG NEW Queue

DFSG, Licensing & New Packages Team

rust-zruntime 0.2.3-1

Package Information

DescriptionSimple single-threaded Rust async runtime - Rust source code

Source code for Debianized Rust crate "zruntime"

MaintainerDebian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed BySimon Quigley <tsimonq2@debian.org>
Sponsortsimonq2@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/rust-team/debcargo-conf.git [src/zruntime] (browse)
Trackerhttps://tracker.debian.org/pkg/rust-zruntime
Uploaded1 hour ago

New Package Report

.changes◂
Distributionunstable
DateSat, 14 Nov 2026 12:43:13 -0600
Sourcerust-zruntime
Version0.2.3-1
Changed-BySimon Quigley <tsimonq2@debian.org>
Architecturesource amd64
Changelog◂
rust-zruntime (0.2.3-1) unstable; urgency=medium
 .
   * Package zruntime 0.2.3 from crates.io using debcargo 2.8.4
.dsc◂
Priorityoptional
Componentmain
Package-Listlibrust-zruntime-dev deb rust optional arch=any
Sectionrust
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: zruntime
Upstream-Contact: Zeeshan Ali Khan <zeeshanak@gnome.org>
Source: https://github.com/z-galaxy/zruntime

Files: *
Copyright: 2026 Zeeshan Ali Khan & zruntime contributors
License: Expat

Files: benches/broadcast.rs
       src/broadcast.rs
       src/tests/broadcast.rs
Copyright: 2020 Yoshua Wuyts, Stjepan Glavina & Zeeshan Ali Khan
License: Expat
Comment:
 The broadcast channel comes from the async-broadcast crate
 (https://github.com/smol-rs/async-broadcast).

Files: debian/*
Copyright:
 2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2026 Simon Quigley <tsimonq2@debian.org>
License: Expat

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 0 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 0 hours ago.

Report◂

DFSG NEW review for rust-zruntime version 0.2.3-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: Yes
  • Issues: 0 blocker, 0 important, 0 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

debian/copyright is DEP-5 and accurate: upstream is MIT/Expat (LICENSE, holder "2026 Zeeshan Ali Khan & zruntime contributors"), and the three files moved from async-broadcast (src/broadcast.rs, src/tests/broadcast.rs, benches/broadcast.rs) have their own stanza naming the 2020 holders Joshua Wuyts, Stjepan Glavina and Zeeshan Ali Khan, exactly as LICENSE records. A tree-wide search found copyright/licence notices nowhere else, so there is no other holder, no other licence and no non-free term; the full Expat text is included (it is not in /usr/share/common-licenses), and the notice is also installed unchanged with the crate source. No file is missing its source form; the only binary is data/logo.png, the rendering of the data/logo.svg that is in the tree.

Packaging

Textbook debcargo output: compat 13 with dh $@ --buildsystem cargo, Build-Depends limited to ${misc:Depends}-style debhelper, rust dependencies split into Build-Depends-Arch with <!nocheck> (correct here, since dh-cargo's build step only copies sources and only the test step compiles), a complete binary Depends matching the crate's features, 17 autopkgtest cases covering every feature combination with Testsuite-Triggers, and DEP-3 patch headers. Standards-Version 4.7.4 matches the 4.7.4.1 Policy in the archive, and every dependency checked is satisfiable there. Nothing is missing and nothing is wrong that a sponsor would require changed.

Issues

None.

Verified ◂
  • The prescan flagged no file: its holder check found every holder in the tree already named in debian/copyright, and it listed no built, minified or non-free-licensed file.
  • A case-sensitive search for Copyright and for ©/(C)/SPDX over the whole tree (excluding .pc/ and debian/cargo-checksum.json) matches only LICENSE (lines 1 and 31), debian/copyright, debian/copyright.debcargo.hint and src/broadcast.rs:1 ("Moved from the async-broadcast crate; see LICENSE for its copyright notices").
  • LICENSE is the Expat licence with two notices: Copyright (c) 2026 Zeeshan Ali Khan & zruntime contributors, and Copyright (c) 2020 Yoshua Wuyts, Stjepan Glavina & Zeeshan Ali Khan for src/broadcast.rs, src/tests/broadcast.rs and benches/broadcast.rs; debian/copyright has exactly these two stanzas plus debian/* and reproduces the full Expat text.
  • A search for Apache, LGPL, GPL, MPL, BSD-, ISC, Unlicense and zlib in src/, tests/, benches/, data/, .github/ and .githooks/ finds nothing: the whole crate is under the one MIT licence.
  • src/net/connect.rs carries no notice; AGENTS.md:77 says its non-blocking connect was "carried over from zbus", whose author and copyright holder is the same Zeeshan Ali Khan, so the Files: * stanza covers it.
  • data/logo.svg is a 12-line hand-written SVG titled "zruntime logo" and data/logo.png is its raster rendering (README:17 references the SVG as the project logo); neither is third-party artwork, and both are covered by Files: *. I did not open the PNG, judging it from its name, placement and the SVG beside it.
  • .github/, .githooks/, AGENTS.md, CLAUDE.md, release-plz.toml, README.md, CHANGELOG.md, CONTRIBUTING.md and SECURITY.md carry no notices and are covered by Files: *; the CI and hook files are not installed, and the rest is installed unchanged with the crate source, so Policy 2.3 does not require their notices to be copied even if they had any.
  • Cargo.toml is cargo-generated (its own header says so) and Cargo.toml.orig is in the tree; .cargo_vcs_info.json is metadata, not a built file.
  • debian/copyright.debcargo.hint is debcargo's unfilled template (it still says FIXME (overlay) UNKNOWN-YEARS and License: UNKNOWN-LICENSE; FIXME (overlay)); it lives under debian/, is superseded by debian/copyright, and the Files: debian/* stanza covers it.
  • Patches: debian/patches/auto/auto-remove-targets.patch is debcargo's remove_targets output dropping the windows-sys and uds_windows dependencies and their feature wiring, which cannot build on Linux targets; debian/patches/relax-deps.patch has DEP-3 headers (Origin: vendor, Forwarded: not-needed, Last-Update) and points criterion at Debian's 0.5 with the async_futures feature, which the benchmarks use (b.to_async(...)); apt-cache confirms librust-criterion-0.5+async-futures-dev is provided by librust-criterion-dev 0.5.1-11.
  • The <!nocheck> markers on Build-Depends-Arch are correct and not a nocheck FTBFS: in /usr/share/perl5/Debian/Debhelper/Buildsystem/cargo.pm the build step for a lib package only copies sources into _source, and only test (which dh skips under nocheck) runs cargo build; cargo itself still arrives through dh-cargo, whose configure step needs it.
  • Every dependency checked exists in the archive with a satisfying version: dh-cargo 34 (provides dh-sequence-cargo), librust-rustix-dev 1.1.5+ds-1 (provides +net, +thread, ...), librust-errno-dev 0.3.14-1+b1, librust-socket2-dev 0.6.5-1 (provides +all, +default), librust-futures-io-dev 0.3.34-1, librust-ntest-dev 0.9.5-1.
  • Standards-Version: 4.7.4 against the archive's debian-policy 4.7.4.1: current, not an issue.
  • debian/changelog is a single well-formed entry for 0.2.3-1 in unstable, signed off by the uploader; the date's weekday is correct.
  • rust-zruntime_0.2.3.orig.tar.gz holds zruntime-0.2.3/ with the same contents as the unpacked tree (its Cargo.toml differs only by the two patches), and rust-zruntime_0.2.3-1.debian.tar.xz contains only debian/: no files were removed or added without a Files-Excluded entry.
  • Points of debian/ read in full: control, rules, changelog, copyright, copyright.debcargo.hint, debcargo.toml, patches/series, both patches, tests/control, source/format, upstream/metadata. debian/cargo-checksum.json and .pc/ were skipped as instructed.
  • uscan found the packaged version as the newest upstream release (upstream 0.2.3, packaged 0.2.3).
Not confirmed ◂
  • I could not build or run the crate, so I did not check that the autopkgtests pass or that criterion 0.5's async_futures API fits the benchmarks beyond the to_async/bench_function calls I saw in benches/.
  • Nothing in the package says why most debian/tests/control cases but not the first carry Architecture: !riscv64; whether that restriction is right cannot be checked without running the tests.
Proposed changes ◂

None.

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package