DFSG NEW Queue

DFSG, Licensing & New Packages Team

siskin 0.22.5-1

Package Information

DescriptionRebol-based command-line utility for building projects

Siskin is a command-line utility written in Rebol that builds a variety of projects from nest files. It was (originally designed for building the Rebol project).

MaintainerPierre Chevalier <pierre.chevalier1967@free.fr>
Changed ByPierre Chevalier <pierre.chevalier1967@free.fr>
Sponsorsthibault@debian.org
Distributionunstable
Architectureany
VCSgit: https://salsa.debian.org/pierrechtux/siskin.git (browse)
Closes#1034057
Trackerhttps://tracker.debian.org/pkg/siskin
Uploaded3 hours ago

New Package Report

.changes◂
Sourcesiskin
Version0.22.5-1
Changed-ByPierre Chevalier <pierre.chevalier1967@free.fr>
Architecturesource amd64
Distributionunstable
DateMon, 26 Oct 2026 14:09:25 +0100
Changelog◂
siskin (0.22.5-1) unstable; urgency=medium
 .
   * Initial Debian packaging of Siskin 0.22.5.
   * Build the Siskin Builder with the Debian-packaged rebol 3.22.5
   * Note: Siskin is mandatory to build Rebol (Closes: #1034057)
.dsc◂
Sectiondevel
Priorityoptional
Componentmain
Package-Listsiskin deb devel optional arch=any
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Siskin-framework Builder
Upstream-Contact: Oldes
Source: https://github.com/Siskin-framework/Builder

Files: *
Copyright: Oldes
License: Apache-2.0

Files: rebol/*
Copyright: 2012 REBOL Technologies
           2012-2026 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/core/mbedtls/*
       rebol/src/include/mbedtls/*
       rebol/src/include/psa/*
Copyright: The Mbed TLS Contributors
License: Apache-2.0

Files: rebol/src/core/brotli/*
       rebol/src/include/brotli/*
Copyright: 2010-2025 Google Inc.
License: Expat

Files: rebol/src/core/deflate/*
Copyright: 2016-2024 Eric Biggers
           2024 Google LLC
License: Expat

Files: rebol/src/core/lz4/*
Copyright: 2011-2020 Yann Collet
License: BSD-2-Clause

Files: rebol/src/core/u-xxhash.c
       rebol/src/include/sys-xxhash.h
Copyright: 2011-2023 Yann Collet
License: BSD-2-Clause

Files: rebol/src/core/f-qsort.c
Copyright: 1992-1993 The Regents of the University of California
License: BSD-3-Clause

Files: rebol/src/core/f-stablemerge-sort.c
Copyright: 2026 Oldes Huhuman
License: public-domain
Comment:
 Algorithm based on Timsort by Tim Peters (2002). Collapse  invariant fix
 per de Gouw et al. (2015).

Files: rebol/src/include/sys-hash.h
Copyright: Austin Appleby
License: public-domain

Files: rebol/src/core/u-qoi.c
       rebol/src/include/sys-qoi.h
Copyright: 2021 Dominic Szablewski
License: Expat

Files: rebol/src/core/f-dtoa.c
Copyright: 1991, 2000-2001 Lucent Technologies
License: dtoa

Files: rebol/src/core/u-jpg.c
       rebol/src/include/sys-jpg.h
Copyright: 1991-1998 Thomas G. Lane
License: IJG

Files: rebol/src/core/f-adp-symmetry-psort.c
Copyright: 2012 Jingchao Chen
License: Adp-SymPSort

Files: rebol/src/core/s-unicode.c
Copyright: 2012 REBOL Technologies
           2012-2026 Rebol Open Source Contributors
           2008-2010 Bjoern Hoehrmann
License: Apache-2.0 and Expat
Comment:
 The UTF-8 decoding code by Bjoern Hoehrmann is licensed under the Expat
 license.  The remaining code is covered by the Apache-2.0 license, as
 stated in the file header.

Files: rebol/src/modules/unicode-utils.reb
Copyright: 2008-2010 Bjoern Hoehrmann
License: Expat

Files: rebol/src/mezz/codec-json.reb
Copyright: 2019 Red Foundation
           2020-2023 Rebol Open Source Contributors
License: BSL-1.0

Files: rebol/src/os/posix/host-compositor.c
       rebol/src/os/win32/host-compositor.c
       rebol/src/os/win32/host-window.c
       rebol/src/include/reb-compositor.h
Copyright: 2012 REBOL Technologies
           2012-2025 Rebol Open Source Contributors
           2012-2018 Saphirion AG & Atronix
           2019 Oldes
           Richard Smolak
License: Apache-2.0

Files: rebol/src/os/posix/host-event.c
       rebol/src/os/win32/host-event.c
       rebol/src/include/reb-dtoa.h
       rebol/src/include/sys-dec-to-char.h
       rebol/src/include/reb-view.h
       rebol/src/boot/window.reb
Copyright: 2012 REBOL Technologies
           2012 Richard Smolak
           2012 Carl Sassenrath
           2012 Oldes
           2012-2013 Saphirion AG
License: Apache-2.0

Files: rebol/src/os/posix/host-lib.c
       rebol/src/os/win32/host-lib.c
Copyright: 2012 REBOL Technologies
           2012-2025 Rebol Open Source Contributors
           2012 Atronix Engineering, Inc.
License: Apache-2.0

Files: rebol/src/include/sys-int-funcs.h
Copyright: 2014 Atronix Engineering, Inc.
License: Apache-2.0

Files: debian/*
Copyright: 2026 Pierre Chevalier <pierre.chevalier1967@free.fr>
License: GPL-3

Files: rebol/src/core/u-zlib.c
Copyright: 1995-2024 Jean-Loup Gailly and Mark Adler
License: Zlib

Files: rebol/src/include/sys-lzav.h
Copyright: 2023-2025 Aleksey Vaneev
License: Expat

Files: rebol/src/boot/graphics.reb
Copyright: 2012 REBOL Technologies
           2012 Saphirion AG
           2012 Richard Smolak
           2012 Carl Sassenrath
License: Apache-2.0

Files: rebol/src/mezz/prot-http.reb
Copyright: 2012 REBOL Technologies
           2012-2026 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/core/mbedtls/chachapoly.c
       rebol/src/include/mbedtls/chacha20.h
       rebol/src/include/mbedtls/chachapoly.h
Copyright: The Mbed TLS Contributors
License: Apache-2.0 or GPL-2+

Files: rebol/src/include/reb-c.h
Copyright: 2012 REBOL Technologies
           2012-2024 Rebol Open Source Developers
License: Apache-2.0

Files: rebol/src/core/mbedtls/chacha20.c
Copyright: The Mbed TLS Contributors
License: Apache-2.0

Files: rebol/src/core/mbedtls/cipher.c
       rebol/src/core/mbedtls/cipher_wrap.c
       rebol/src/include/mbedtls/cipher.h
Copyright: The Mbed TLS Contributors
License: Apache-2.0

Files: rebol/src/include/mbedtls/config_adjust_legacy_crypto.h
       rebol/src/include/mbedtls/config.h
       rebol/src/include/mbedtls/check_config.h
       rebol/src/include/mbedtls/error.h
       rebol/src/include/psa/crypto_builtin_composites.h
       rebol/src/include/psa/crypto_config.h
       rebol/src/include/psa/crypto_sizes.h
       rebol/src/include/psa/crypto_values.h
Copyright: The Mbed TLS Contributors
License: Apache-2.0

Files: rebol/src/include/opt-config.h
Copyright: 2012 REBOL Technologies
License: Apache-2.0

Files: rebol/src/include/sys-crypt.h
Copyright: 2012 REBOL Technologies
            2012-2022 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/mezz/prot-tls.reb
Copyright: 2025 Oldes
License: Expat

Files: rebol/src/tests/units/crypt-port-test.r3
Copyright: Oldes, Peter W A Wood
License: Apache-2.0

Files: rebol/src/core/u-compress.c
Copyright: 2012 REBOL Technologies
           2012-2025 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/core/u-lzma.c
       rebol/src/include/sys-lzma.h
Copyright: 2018 Igor Pavlov
License: LZMA

Files: rebol/src/core/u-lzw.c
Copyright: 2012 REBOL Technologies
           2012-2022 Rebol Open Source Contributors
           2016-2020 David Bryant
License: Apache-2.0 and BSD-3-Clause
Comment:
 The LZW compressor/decompressor by David Bryant is licensed under the BSD
 3-Clause license.  The remaining code is covered by the Apache-2.0 license,
 as stated in the file header.

Files: rebol/src/core/u-crush.c
Copyright: 2012 REBOL Technologies
           2012-2025 Rebol Open Source Contributors
License: Apache-2.0 and public-domain
Comment:
 This code was ported from the original Ilya Muravyov's code, which he placed
 in the public domain.  The original source is available at:
  https://sourceforge.net/projects/crush
 At this URL, the only mention of a license is: "License Public Domain"

Files: rebol/src/core/u-rc4.c
       rebol/src/include/sys-rc4.h
Copyright: 2007 Cameron Rich
License: CUSTOM_Cameron_Rich

Files: rebol/src/include/reb-struct.h
Copyright: 2014 Atronix Engineering, Inc.
           2021-2025 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/core/f-int.c
Copyright: 2014 Atronix Engineering, Inc.
License: Apache-2.0

Files: rebol/src/core/c-do.c
Copyright: 2012 REBOL Technologies
           2012-2025 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/core/t-struct.c
Copyright: 2014 Atronix Engineering, Inc.
           2021-2026 Rebol Open Source Contributors
License: Apache-2.0

Files: rebol/src/mezz/prot-mysql.reb
Copyright: 2020 SOFTINNOV, Atronix Engineering, Inc., Oldes
License: BSD-like-Nenad
Comment:
 In git history, at commit 01284d6b966511902396f7837a27b6ec34425ff6, it
 appears that this code is a port/rewrite of the original MySQL driver
 written by Nenad Rakocevic.  The author's website describes its license
 only as "BSD-like".  No complete license text has been found.

Files: rebol/src/modules/munge3.reb
Copyright: 2019 Ashley G Truter
License: Expat


License: Adp-SymPSort
 Permission to use, copy, modify, and distribute this software and its
 documentation with or without modifications and for any purpose and
 without fee is hereby granted, provided that any copyright notices
 appear in all copies and that both those copyright notices and this
 permission notice appear in supporting documentation, and that the
 names of the contributors or copyright holders not be used in
 advertising or publicity pertaining to distribution of the software
 without specific prior permission.
 .
 THE CONTRIBUTORS AND COPYRIGHT HOLDERS OF THIS SOFTWARE DISCLAIM ALL
 WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED
 WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL THE
 CONTRIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT
 OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
 OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE
 OR PERFORMANCE OF THIS SOFTWARE

License: dtoa
 Permission to use, copy, modify, and distribute this software for any
 purpose without fee is hereby granted, provided that this entire notice is
 included in all copies of any software which is or includes a copy or
 modification of this software and in all copies of the supporting
 documentation for such software.  THIS SOFTWARE IS BEING PROVIDED "AS IS",
 WITHOUT ANY EXPRESS OR IMPLIED WARRANTY. IN PARTICULAR, NEITHER THE AUTHOR
 NOR LUCENT MAKES ANY REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
 MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR PURPOSE.

License: IJG
 Independent JPEG Group License
 .
 The authors make NO WARRANTY or representation, either express or implied,
 with respect to this software, its quality, accuracy, merchantability, or
 fitness for a particular purpose. This software is provided "AS IS", and
 you, its user, assume the entire risk as to its quality and accuracy.
 This software is copyright (C) 1991-1998, Thomas G. Lane. All Rights
 Reserved except as specified below.
 .
 Permission is hereby granted to use, copy, modify, and distribute this
 software (or portions thereof) for any purpose, without fee, subject
 to these conditions:
 (1) If any part of the source code for this software is distributed,
     then this README file must be included, with this copyright and
      no-warranty notice unaltered; and any additions, deletions, or
      changes to the original files must be clearly indicated in
       accompanying documentation.
 (2) If only executable code is distributed, then the accompanying
     documentation must state that "this software is based in part on
     the work of the Independent JPEG Group".
 (3) Permission for use of this software is granted only if the user
     accepts full responsibility for any undesirable consequences;
     the authors accept NO LIABILITY for damages of any kind.
 .
 These conditions apply to any software derived from or based on the
 IJG code, not just to the unmodified library. If you use our work,
 you ought to acknowledge us.
 .
 Permission is NOT granted for the use of any IJG author's name or
 company name in advertising or publicity relating to this software
 or products derived from it. This software may be referred to only
 as "the Independent JPEG Group's software".
 .
 We specifically permit and encourage the use of this software as the
 basis of commercial products, provided that all warranty or liability
 claims are assumed by the product vendor.
 .
 ansi2knr.c is included in this distribution by permission of L. Peter
 Deutsch, sole proprietor of its copyright holder, Aladdin Enterprises
 of Menlo Park, CA. ansi2knr.c is NOT covered by the above copyright
 and conditions, but instead by the usual distribution terms of the
 Free Software Foundation; principally, that you must include source
 code if you redistribute it. (See the file ansi2knr.c for full
 details.) However, since ansi2knr.c is not needed as part of any
 program generated from the IJG code, this does not limit you more
 than the foregoing paragraphs do.
 .
 The Unix configuration script "configure" was produced with GNU
 Autoconf. It is copyright by the Free Software Foundation but is
 freely distributable. The same holds for its supporting scripts
 (config.guess, config.sub, ltconfig, ltmain.sh). Another support
 script, install-sh, is copyright by M.I.T. but is also freely
 distributable.
 .
 It appears that the arithmetic coding option of the JPEG spec is
 covered by patents owned by IBM, AT&T, and Mitsubishi. Hence
 arithmetic coding cannot legally be used without obtaining one or
 more licenses. For this reason, support for arithmetic coding has
 been removed from the free JPEG software. (Since arithmetic coding
 provides only a marginal gain over the unpatented Huffman mode, it
 is unlikely that very many implementations will support it.) So far
 as we are aware, there are no patent restrictions on the remaining
 code.
 .
 The IJG distribution formerly included code to read and write GIF
 files. To avoid entanglement with the Unisys LZW patent, GIF reading
 support has been removed altogether, and the GIF writer has been
 simplified to produce "uncompressed GIFs". This technique does not
 use the LZW algorithm; the resulting GIF files are larger than usual,
 but are readable by all standard GIF decoders.
 .
 We are required to state that
 "The Graphics Interchange Format(c) is the Copyright property of
 CompuServe Incorporated. GIF(sm) is a Service Mark property of
 CompuServe Incorporated."

License: Apache-2.0
 /usr/share/common-licenses/Apache-2.0

License: GPL-3
 /usr/share/common-licenses/GPL-3

License: GPL-2+
 This program is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation; either version 2 of the License, or
 (at your option) any later version.
 .
 On Debian systems, the complete text of version 2 of the GNU General
 Public License can be found in `/usr/share/common-licenses/GPL-2'.

License: BSD-2-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice, this
 list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
 this list of conditions and the following disclaimer in the documentation
 and/or other materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND
 ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice, this
 list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright notice,
 this list of conditions and the following disclaimer in the documentation
 and/or other materials provided with the distribution.
 .
 3. Neither the name of the copyright holder nor the names of its contributors
 may be used to endorse or promote products derived from this software without
 specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND
 ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: BSL-1.0
 Boost Software License - Version 1.0 - August 17th, 2003
 .
 Permission is hereby granted, free of charge, to any person or organization
 obtaining a copy of the software and accompanying documentation covered by this
 license (the "Software") to use, reproduce, display, distribute, execute, and
 transmit the Software, and to prepare derivative works of the Software, and to
 permit third-parties to whom the Software is furnished to do so, all subject to
 the following:
 .
 The copyright notices in the Software and this entire statement, including the
 above license grant, this restriction and the following disclaimer, must be
 included in all copies of the Software, in whole or in part, and all derivative
 works of the Software, unless such copies or derivative works are solely in the
 form of machine-executable object code generated by a source language
 processor.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT SHALL
 THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE FOR ANY
 DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

License: Expat
 MIT License (Expat)
 .
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in
 the Software without restriction, including without limitation the rights to
 use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
 of the Software, and to permit persons to whom the Software is furnished to do
 so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.

License: public-domain
 This software is released into the public domain.
Comment:
 In the few cases where this license is mentioned, no additional information
 could be found.

License: Zlib
 This software is provided 'as-is', without any express or implied
 warranty.  In no event will the authors be held liable for any damages
 arising from the use of this software.
 .
 Permission is granted to anyone to use this software for any purpose,
 including commercial applications, and to alter it and redistribute it
 freely, subject to the following restrictions:
 .
 1. The origin of this software must not be misrepresented; you must not
    claim that you wrote the original software. If you use this software
    in a product, an acknowledgment in the product documentation would be
    appreciated but is not required.
 2. Altered source versions must be plainly marked as such, and must not be
    misrepresented as being the original software.
 3. This notice may not be removed or altered from any source distribution.

License: CUSTOM_Cameron_Rich
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 * Redistributions of source code must retain the above copyright notice,
   this list of conditions and the following disclaimer.
 * Redistributions in binary form must reproduce the above copyright notice,
   this list of conditions and the following disclaimer in the documentation
   and/or other materials provided with the distribution.
 * Neither the name of the axTLS project nor the names of its contributors
   may be used to endorse or promote products derived from this software
   without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
 PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Comment:
 This license is very similar to the BSD-3-Clause, but there are some few
 differences:
  copyright holder => axTLS project
  COPYRIGHT OWNER  => COPYRIGHT HOLDER

License: LZMA
 LZMA SDK is placed in the public domain.
 .
 Anyone is free to copy, modify, publish, use, compile, sell, or distribute
 the original LZMA SDK code, either in source code form or as a compiled
 binary, for any purpose, commercial or non-commercial, and by any means.
 .
 Note: The abbreviation LZMA originally stood for Lempel - Ziv - Markov chain
 - Arithmetic coding. Preliminary versions of LZMA used arithmetic coding. But
 in the final version of LZMA, arithmetic coding was replaced by range coding.

License: BSD-like-Nenad
 Open-source : BSD-like license.
Comment:
 The line above is the only mention of license on Softinnov (Nenad Rakocevic)
 web page, https://www.softinnov.org/rebol/mysql.shtml, which is the origin of
 this prot-mysql.reb file.

DFSG Assistant LLM REVIEW 1 blocker, 2 important, 3 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 2 hours ago.

Report◂

DFSG NEW review for siskin version 0.22.5-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: No
  • Packaging is of good quality: No
  • Issues: 1 blocker, 2 important, 3 minor
  • debian/watch: absent
  • debian/copyright: machine-readable
  • Scan before the review: 2 found

Licensing

The licences in the tree are free: upstream ships the Apache-2.0 text as LICENSE and the only files with their own notices (tree/rebol/Siskin/prebol.reb, siskin.rc, test/macos.nest) are Apache-2.0 or carry no licence terms of their own, and every licence text debian/copyright quotes (IJG, LZMA, Expat, BSD, BSL, Zlib) is DFSG-free. debian/copyright does not, however, describe the package accurately: tree/rebol/Siskin/prebol.reb names Carl Sassenrath and Holger Kruse as authors and carries a Rights: clause, while the only stanza that matches it says Copyright: Oldes, License: Apache-2.0; and about forty stanzas describe a rebol/ tree that this source package does not contain (the Rebol sources are copied from rebol-src at build time).

Packaging

The packaging is small and otherwise sound: dh with compat 13, only a binary and a man page installed, no maintainer scripts, current Standards-Version 4.7.4.1, correct ${shlibs:Depends}/${misc:Depends}, and a build that is patched not to fetch from the network. It cannot be uploaded as it stands because Architecture: any is combined with a build that only knows how to make amd64, i386, armhf and arm64 binaries, so it will FTBFS on every other release architecture; the quilt patch has no DEP-3 header and a misleading name, and there is no autopkgtest.

Issues

1. [blocker] [licensing] Files: * gives prebol.reb only Oldes/Apache-2.0, but the file names Carl Sassenrath and Holger Kruse as authors and states a Rights: clause

  • Files: tree/rebol/Siskin/prebol.reb:8,22-25, debian/copyright:6-8
  • Basis: checked, in the package or with a reference tool
  • Evidence: Author: ["Carl Sassenrath" "Holger Kruse" "Oldes"] and Rights: {Users are allowed to modify this source, but must keep this header intact. Changes to the official version must be approved by REBOL Technologies www.REBOL.com. ...} versus Files: * / Copyright: Oldes / License: Apache-2.0.
  • Problem: No stanza in debian/copyright mentions this file: the catch-all Files: * is the only one that matches it, and it names a single holder and no rights statement. Two authors credited by the file itself are absent, and its Rights: clause (approval by REBOL Technologies is required for changes to the official version) is not recorded anywhere, so a reader cannot tell whether the Apache-2.0 claim in the stanza actually covers this file. Policy 12.5 and copyright-format require the copyright and licence of each file to be stated accurately.
  • Fix: Add a Files: tree/rebol/Siskin/prebol.reb stanza naming Carl Sassenrath, Holger Kruse and Oldes, quoting the Rights: field, and say explicitly that the file is Apache-2.0 as relicensed in Rebol3 (upstream's LICENSE) rather than relying on Files: *; if the Rights: clause is meant to govern, its DFSG status has to be settled with upstream first.

2. [important] [licensing] ~40 Files: rebol/... stanzas describe a tree that is not in the source package

  • Files: debian/copyright:10-290, debian/rules:31-33
  • Basis: checked, in the package or with a reference tool
  • Evidence: Files: rebol/*, Files: rebol/src/core/mbedtls/*, Files: rebol/src/core/u-jpg.c … while the top level holds only tree/, test/, assets/, siskin.r3, LICENSE, README.md, .github/, debian/; debian/rules copies the Rebol sources in at build time with cp -a /usr/share/rebol-src tree/rebol/Rebol.
  • Problem: DEP-5 patterns are anchored at the top of the tree, so every one of these stanzas matches no file in the package; the file therefore documents another package's source tree. The licences they quote (Expat, BSD-2/3, IJG, LZMA, dtoa, …) are evidently there for the Rebol code compiled into the produced binary, but as written the file says nothing about where that code lives and misleads anyone checking licence coverage; debian/copyright is meant to describe the files of this package (Policy 12.5, copyright-format 5.2).
  • Fix: Keep the licence paragraphs (they cover code from rebol-src that ends up in the binary) but say so — e.g. a Comment: in the relevant stanzas — and remove the file patterns, which name paths that do not exist here; or write one stanza for the whole built binary and reference rebol's copyright.

3. [important] [packaging] Architecture: any but only amd64, i386, armhf and arm64 have a matching build egg — FTBFS on the other release architectures

  • Files: debian/control, debian/rules:7-15,33, tree/rebol/siskin.nest:97-121, tree/rebol/Siskin/siskin.reb:1183-1191
  • Basis: inferred from what was read, not seen directly
  • Evidence: debian/rules passes siskin-linux-$(ARCH) with ARCH mapped only for amd64→x86_64, i386→x86, armhf→armv7, arm64→aarch64; tree/rebol/siskin.nest defines eggs named only siskin-linux-x86, -x86_64, -armv6, -armv7, -aarch64; get-spec matches eggs by name and build-target otherwise prints Command not handled: and returns false.
  • Problem: On armel, mips64el, ppc64el, riscv64, s390x and loong64 the unmapped architecture name is passed straight through, no egg of that name exists, so no binary is produced and override_dh_auto_test then fails to execute tree/rebol/Siskin/build/siskin-linux-<arch>. Since the package is Architecture: any the build daemons will try all of them, and each failure keeps the package out of testing.
  • Fix: Either restrict the field to the architectures the nest can actually build, e.g. Architecture: amd64 i386 armhf arm64, or add an armel→armv6 mapping plus eggs for the remaining architectures upstream supports.

4. [minor] [packaging] The quilt patch has no DEP-3 header, and its name claims sources that are not bundled

  • Files: debian/patches/0001-use-bundled-rebol-sources.patch:1-9, debian/patches/series:1
  • Basis: checked, in the package or with a reference tool
  • Evidence: The patch starts with Index: siskin/tree/rebol/siskin.nest / --- siskin.orig/... and has no Description:, Origin: or Forwarded: field; its only hunk deletes github: @Rebol from tree/rebol/siskin.nest.
  • Problem: Nothing in the package says why the line is removed (it stops the builder cloning Rebol from GitHub, which would be a network fetch at build time), and bundled rebol sources is the opposite of what the patch does — debian/rules copies /usr/share/rebol-src into tree/rebol/Rebol. A sponsor cannot tell the patch's purpose or whether it should be forwarded.
  • Fix: Add a DEP-3 header with a Description: explaining that it makes the builder use the local Rebol/ tree instead of cloning from GitHub, plus Forwarded: not-needed (or an upstream reference), and rename the patch to match.

5. [minor] [packaging] No autopkgtest, though the built binary is trivially testable

  • Files: debian/
  • Basis: checked, in the package or with a reference tool
  • Evidence: debian/ holds no tests/control; the only test is the build-time tree/rebol/Siskin/build/siskin-linux-$(ARCH) -V in debian/rules.
  • Problem: A new package with a command-line binary and no autopkgtest gets no post-build check in testing; siskin -V would exercise the installed binary.
  • Fix: Add debian/tests/control with a Tests: smoke stanza and debian/tests/smoke running siskin -V (and perhaps siskin --list on a nest from the examples).

6. [minor] [packaging] There is no debian/watch

  • Files: debian/watch
  • Basis: found by the review tooling's own checks
  • Problem: Without a watch file new upstream releases are not noticed by uscan, the tracker or the maintainer's tools.
  • Fix: Add a debian/watch in version 5 format, or, if upstream has no usable release channel, one holding a comment that says so.

Verified

  • Read debian/ in full: changelog, control, rules, copyright, siskin.docs, siskin.manpages, siskin.1, source/format, patches/series and the only patch; there are no maintainer scripts, no debian/tests, no debian/gbp.conf and no debian/upstream/metadata.
  • The whole upstream tree was walked directory by directory (119 files: siskin.r3, tree/**, test/**, assets/**, .github/workflows/**, LICENSE, README.md, dotfiles); .pc/ was not read.
  • debian/copyright is DEP-5 with an exact Format: line; an Apache-2.0 Files: * catch-all and a debian/* GPL-3 stanza against /usr/share/common-licenses/GPL-3 cover every file that exists; upstream LICENSE is the unmodified Apache-2.0 text and there is no NOTICE file.
  • Prescan item debian/copyright:326 (IJG): the text is the Independent JPEG Group licence, which is free — the Permission is NOT granted for the use of any IJG author's name clause restricts the use of names in advertising only, and the paragraph about commercial products grants rather than limits use. It belongs to the stanza for rebol/src/core/u-jpg.c, a file of rebol-src, not of this package (see the issue on the rebol/ stanzas).
  • Prescan item debian/copyright:541 (LZMA): Anyone is free to copy, modify, publish, use, compile, sell, or distribute … for any purpose, commercial or non-commercial, and by any means is a public-domain grant, not a restriction; it belongs to rebol/src/core/u-lzma.c, which is rebol-src's file, not this package's.
  • The prescan's author check found no missing holder among the Copyright/© notices it reads; the holders missing from debian/copyright for prebol.reb are named in a REBOL Author: field, which that check does not parse.
  • test/macos.nest:26 Copyright: "Copyright © 2022 Oldes. All rights reserved." is an Info.plist value that a test macOS bundle is generated with, not a licence on the file; tree/rebol/Siskin/siskin.rc:14 VALUE "LegalCopyright", "2024 Oldes" is a Windows resource string, consistent with Files: *.
  • No built or minified files in the tree: the only binaries are tree/rebol/Siskin/siskin.ico and the three icons under assets/ (upstream artwork, no generator needed); test/src/*.c and test/macos/main.m are plain test fixtures.
  • rebol and rebol-src (Build-Depends) are built by source package rebol 3.22.5-1, waiting in NEW — not a missing dependency. zlib1g-dev is needed because the nest's Linux target links %dl %z.
  • Standards-Version 4.7.4.1 equals the reviewing system's Policy version 4.7.4.1; the Vcs-*, Homepage and Rules-Requires-Root: no fields are in order, and the binary package depends on ${shlibs:Depends} and ${misc:Depends}.
  • At debhelper compat 13 dh skips override_dh_auto_test when DEB_BUILD_OPTIONS has nocheck (confirmed with the debhelper tool), so the test override needs no nocheck check of its own.
  • debian/changelog is an initial 0.22.5-1 to unstable with a well-formed trailer; debian/source/format is 3.0 (quilt).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0, GPL-2, GPL-3).

Not confirmed

  • Whether the rebol-src binary package installs the Rebol sources at /usr/share/rebol-src, which debian/rules copies from; the package is in NEW and not installed on the reviewing system, so the path could not be checked.
  • Whether Debian bug #1034057, closed by the changelog entry, is about siskin rather than about rebol; there is no access to the BTS here.
  • Whether the build itself succeeds on amd64 (the only architecture the uploader can have tried); nothing in the package suggests it does not, but it was not run.

Proposed changes

None.

Uploader's response to the LLM review

Answering a few points:

  • [important] [licensing] ~40 Files: rebol/... stanzas describe a tree that is not in the source package

Yes, it's coming from the rebol-src binary package built by the rebol source package.

[important] [packaging] Architecture: any but only amd64, i386, armhf and arm64 have a matching build egg — FTBFS
on the other release architectures

Not a problem per se.

[minor] [packaging] The quilt patch [...] name claims sources that are not bundled

There's probably a minor mistake on this: the patch indeed avoids using the bundled rebol source, and rather take the source from the rebol-src binary package.

— Samuel Thibault (sthibault), 1 hour ago

Back to Dashboard | View all reviews for this package