symfony 8.2.0~beta1+dfsg-1
Package Information
| Description | set of reusable components and framework for web projects ${phpcomposer:description} allows one to create websites and web applications. It’s a set of tools and a development methodology. This package depends on every component. Applications depending on Symfony should rather depend on individual components actually needed by them. |
|---|---|
| Maintainer | Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> |
| Changed By | David Prévot <taffit@debian.org> |
| Sponsor | taffit@debian.org |
| Distribution | experimental |
| Architecture | all |
| VCS | git: https://salsa.debian.org/php-team/pear/symfony.git (browse) |
| Popcon Installs | 8491 |
| Binary NEW | Yes (new binary packages of a source already in sid) |
| Tracker | https://tracker.debian.org/pkg/symfony |
| Uploaded | 1 hour ago |
New Package Report
.changes
| Date | Thu, 05 Nov 2026 07:59:52 +0100 |
|---|---|
| Source | symfony |
| Version | 8.2.0~beta1+dfsg-1 |
| Changed-By | David Prévot <taffit@debian.org> |
| Architecture | source all |
| Distribution | experimental |
Changelog
symfony (8.2.0~beta1+dfsg-1) experimental; urgency=medium
.
[ Fabien Potencier ]
* Update VERSION for 8.2.0-BETA1
.
[ Nicolas Grekas ]
* Require v3.8.1 of the contracts
.
[ Pascal CESCON - Amoifr ]
* [Translation] Re-add the POEditor provider bridge
.
[ soyuka ]
* [JsonSchema] Add the component
.
[ NewtTheWolf ]
* [Mailer] Add TurboSMTP bridge
.
[ Piero Recchia ]
* [Notifier] Add the WhatsApp bridge
.
[ Mathieu Ledru ]
* [Notifier] Add the Facebook Page bridge
* [Notifier] Add the Instagram bridge
* [Notifier] Add the Threads bridge
.
[ Laurent ]
* [Notifier] Add the SMS Proxima bridge
.
[ Florent Morselli ]
* [KeyManagement] Introduce the KeyManagement component
* [KeyManagement] Add the AWS, Azure, Google Cloud,
HashiCorp Vault and Flysystem bridges
* [KeyManagement] Add the Doctrine DBAL and ORM bridges
.
[ vadage ]
* [Mailer] Add a bridge for the Cloudflare email service
.
[ Alessandro Lai ]
* [Messenger] Add MongoDB bridge
.
[ Gabe (MailKite) ]
* [Mailer] Add MailKite bridge
.
[ Jeroen Moonen ]
* [Mailer] Add PufferPost bridge
.
[ Antonio Pauletich ]
* [KeyManagement] Add KMIP bridge
.
[ Dennis Petersmann ]
* [Mailer] Add Zoho CPaaS bridge
.
[ daFish81 ]
* [KeyManagement] Add a Scaleway Key Manager bridge
.
[ David Prévot ]
* Add new packages:
+ php-symfony-json-schema
+ php-symfony-key-management
+ php-symfony-aws-key-management
+ php-symfony-azure-keyvault-key-management
+ php-symfony-doctrine-dbal-key-management
+ php-symfony-doctrine-orm-key-management
+ php-symfony-flysystem-key-management
+ php-symfony-google-cloud-key-management
+ php-symfony-hashicorp-vault-key-management
+ php-symfony-kmip-key-management
+ php-symfony-scaleway-key-management
+ php-symfony-cloudflare-mailer
+ php-symfony-mail-kite-mailer
+ php-symfony-puffer-post-mailer
+ php-symfony-turbo-smtp-mailer
+ php-symfony-zoho-cpaas-mailer
+ php-symfony-amp-sql-messenger
+ php-symfony-mongodb-messenger
+ php-symfony-facebook-page-notifier
+ php-symfony-instagram-notifier
+ php-symfony-sms-proxima-notifier
+ php-symfony-threads-notifier
+ php-symfony-whats-app-notifier
+ php-symfony-po-editor-translation-provider
* Update Homepage documentation URLs
* Ignore base64 errors
* Update checksum
* Update exclusions for phpab
* New (build-)dependencies:
+ php-amphp-sql
+ php-async-aws-kms
+ php-league-flysystem
+ php-mongodb-mongodb
* Exclude more tests.dsc
| Priority | optional |
|---|---|
| Component | main |
| Package-List | php-symfony deb php optional arch=all php-symfony-aha-send-mailer deb php optional arch=all php-symfony-all-my-sms-notifier deb php optional arch=all php-symfony-amazon-dynamo-db-lock deb php optional arch=all php-symfony-amazon-mailer deb php optional arch=all php-symfony-amazon-sns-notifier deb php optional arch=all php-symfony-amazon-sqs-messenger deb php optional arch=all php-symfony-amp-sql-messenger deb php optional arch=all php-symfony-amqp-messenger deb php optional arch=all php-symfony-asset deb php optional arch=all php-symfony-asset-mapper deb php optional arch=all php-symfony-aws-key-management deb php optional arch=all php-symfony-azure-keyvault-key-management deb php optional arch=all php-symfony-azure-mailer deb php optional arch=all php-symfony-bandwidth-notifier deb php optional arch=all php-symfony-beanstalkd-messenger deb php optional arch=all php-symfony-bluesky-notifier deb php optional arch=all php-symfony-brevo-mailer deb php optional arch=all php-symfony-brevo-notifier deb php optional arch=all php-symfony-browser-kit deb php optional arch=all php-symfony-cache deb php optional arch=all php-symfony-chatwork-notifier deb php optional arch=all php-symfony-click-send-notifier deb php optional arch=all php-symfony-clickatell-notifier deb php optional arch=all php-symfony-clock deb php optional arch=all php-symfony-cloudflare-mailer deb php optional arch=all php-symfony-config deb php optional arch=all php-symfony-console deb php optional arch=all php-symfony-contact-everyone-notifier deb php optional arch=all php-symfony-crowdin-translation-provider deb php optional arch=all php-symfony-css-selector deb php optional arch=all php-symfony-debug-bundle deb php optional arch=all php-symfony-dependency-injection deb php optional arch=all php-symfony-discord-notifier deb php optional arch=all php-symfony-doctrine-bridge deb php optional arch=all php-symfony-doctrine-dbal-key-management deb php optional arch=all php-symfony-doctrine-messenger deb php optional arch=all php-symfony-doctrine-orm-key-management deb php optional arch=all php-symfony-dom-crawler deb php optional arch=all php-symfony-dotenv deb php optional arch=all php-symfony-emoji deb php optional arch=all php-symfony-engagespot-notifier deb php optional arch=all php-symfony-error-handler deb php optional arch=all php-symfony-esendex-notifier deb php optional arch=all php-symfony-event-dispatcher deb php optional arch=all php-symfony-expo-notifier deb php optional arch=all php-symfony-expression-language deb php optional arch=all php-symfony-facebook-page-notifier deb php optional arch=all php-symfony-fake-chat-notifier deb php optional arch=all php-symfony-fake-sms-notifier deb php optional arch=all php-symfony-filesystem deb php optional arch=all php-symfony-finder deb php optional arch=all php-symfony-firebase-notifier deb php optional arch=all php-symfony-flysystem-key-management deb php optional arch=all php-symfony-form deb php optional arch=all php-symfony-forty-six-elks-notifier deb php optional arch=all php-symfony-framework-bundle deb php optional arch=all php-symfony-free-mobile-notifier deb php optional arch=all php-symfony-gateway-api-notifier deb php optional arch=all php-symfony-go-ip-notifier deb php optional arch=all php-symfony-google-chat-notifier deb php optional arch=all php-symfony-google-cloud-key-management deb php optional arch=all php-symfony-google-mailer deb php optional arch=all php-symfony-hashicorp-vault-key-management deb php optional arch=all php-symfony-html-sanitizer deb php optional arch=all php-symfony-http-client deb php optional arch=all php-symfony-http-foundation deb php optional arch=all php-symfony-http-kernel deb php optional arch=all php-symfony-infobip-mailer deb php optional arch=all php-symfony-infobip-notifier deb php optional arch=all php-symfony-instagram-notifier deb php optional arch=all php-symfony-intl deb php optional arch=all php-symfony-iqsms-notifier deb php optional arch=all php-symfony-isendpro-notifier deb php optional arch=all php-symfony-joli-notif-notifier deb php optional arch=all php-symfony-json-path deb php optional arch=all php-symfony-json-schema deb php optional arch=all php-symfony-json-streamer deb php optional arch=all php-symfony-kaz-info-teh-notifier deb php optional arch=all php-symfony-key-management deb php optional arch=all php-symfony-kmip-key-management deb php optional arch=all php-symfony-ldap deb php optional arch=all php-symfony-light-sms-notifier deb php optional arch=all php-symfony-line-bot-notifier deb php optional arch=all php-symfony-line-notify-notifier deb php optional arch=all php-symfony-linked-in-notifier deb php optional arch=all php-symfony-lock deb php optional arch=all php-symfony-loco-translation-provider deb php optional arch=all php-symfony-lokalise-translation-provider deb php optional arch=all php-symfony-lox24-notifier deb php optional arch=all php-symfony-mail-kite-mailer deb php optional arch=all php-symfony-mail-pace-mailer deb php optional arch=all php-symfony-mailchimp-mailer deb php optional arch=all php-symfony-mailer deb php optional arch=all php-symfony-mailer-send-mailer deb php optional arch=all php-symfony-mailgun-mailer deb php optional arch=all php-symfony-mailjet-mailer deb php optional arch=all php-symfony-mailjet-notifier deb php optional arch=all php-symfony-mailomat-mailer deb php optional arch=all php-symfony-mailtrap-mailer deb php optional arch=all php-symfony-mastodon-notifier deb php optional arch=all php-symfony-matrix-notifier deb php optional arch=all php-symfony-mattermost-notifier deb php optional arch=all php-symfony-mercure-notifier deb php optional arch=all php-symfony-message-bird-notifier deb php optional arch=all php-symfony-message-media-notifier deb php optional arch=all php-symfony-messenger deb php optional arch=all php-symfony-microsoft-graph-mailer deb php optional arch=all php-symfony-microsoft-teams-notifier deb php optional arch=all php-symfony-mime deb php optional arch=all php-symfony-mobyt-notifier deb php optional arch=all php-symfony-mongodb-messenger deb php optional arch=all php-symfony-monolog-bridge deb php optional arch=all php-symfony-notifier deb php optional arch=all php-symfony-novu-notifier deb php optional arch=all php-symfony-ntfy-notifier deb php optional arch=all php-symfony-object-mapper deb php optional arch=all php-symfony-octopush-notifier deb php optional arch=all php-symfony-one-signal-notifier deb php optional arch=all php-symfony-options-resolver deb php optional arch=all php-symfony-orange-sms-notifier deb php optional arch=all php-symfony-ovh-cloud-notifier deb php optional arch=all php-symfony-pager-duty-notifier deb php optional arch=all php-symfony-password-hasher deb php optional arch=all php-symfony-phpunit-bridge deb php optional arch=all php-symfony-phrase-translation-provider deb php optional arch=all php-symfony-plivo-notifier deb php optional arch=all php-symfony-po-editor-translation-provider deb php optional arch=all php-symfony-postal-mailer deb php optional arch=all php-symfony-postmark-mailer deb php optional arch=all php-symfony-prelude-notifier deb php optional arch=all php-symfony-primotexto-notifier deb php optional arch=all php-symfony-process deb php optional arch=all php-symfony-property-access deb php optional arch=all php-symfony-property-info deb php optional arch=all php-symfony-psr-http-message-bridge deb php optional arch=all php-symfony-puffer-post-mailer deb php optional arch=all php-symfony-pushover-notifier deb php optional arch=all php-symfony-pushy-notifier deb php optional arch=all php-symfony-rate-limiter deb php optional arch=all php-symfony-redis-messenger deb php optional arch=all php-symfony-redlink-notifier deb php optional arch=all php-symfony-remote-event deb php optional arch=all php-symfony-resend-mailer deb php optional arch=all php-symfony-ring-central-notifier deb php optional arch=all php-symfony-rocket-chat-notifier deb php optional arch=all php-symfony-routing deb php optional arch=all php-symfony-runtime deb php optional arch=all php-symfony-scaleway-key-management deb php optional arch=all php-symfony-scaleway-mailer deb php optional arch=all php-symfony-scheduler deb php optional arch=all php-symfony-security-bundle deb php optional arch=all php-symfony-security-core deb php optional arch=all php-symfony-security-csrf deb php optional arch=all php-symfony-security-http deb php optional arch=all php-symfony-semaphore deb php optional arch=all php-symfony-sendberry-notifier deb php optional arch=all php-symfony-sendgrid-mailer deb php optional arch=all php-symfony-serializer deb php optional arch=all php-symfony-sevenio-notifier deb php optional arch=all php-symfony-simple-textin-notifier deb php optional arch=all php-symfony-sinch-notifier deb php optional arch=all php-symfony-sipgate-notifier deb php optional arch=all php-symfony-slack-notifier deb php optional arch=all php-symfony-sms-biuras-notifier deb php optional arch=all php-symfony-sms-factor-notifier deb php optional arch=all php-symfony-sms-proxima-notifier deb php optional arch=all php-symfony-sms-sluzba-notifier deb php optional arch=all php-symfony-smsapi-notifier deb php optional arch=all php-symfony-smsbox-notifier deb php optional arch=all php-symfony-smsc-notifier deb php optional arch=all php-symfony-smsense-notifier deb php optional arch=all php-symfony-smsmode-notifier deb php optional arch=all php-symfony-spot-hit-notifier deb php optional arch=all php-symfony-stopwatch deb php optional arch=all php-symfony-string deb php optional arch=all php-symfony-sweego-mailer deb php optional arch=all php-symfony-sweego-notifier deb php optional arch=all php-symfony-telegram-notifier deb php optional arch=all php-symfony-telnyx-notifier deb php optional arch=all php-symfony-termii-notifier deb php optional arch=all php-symfony-threads-notifier deb php optional arch=all php-symfony-translation deb php optional arch=all php-symfony-tui deb php optional arch=all php-symfony-turbo-sms-notifier deb php optional arch=all php-symfony-turbo-smtp-mailer deb php optional arch=all php-symfony-twig-bridge deb php optional arch=all php-symfony-twig-bundle deb php optional arch=all php-symfony-twilio-notifier deb php optional arch=all php-symfony-twitter-notifier deb php optional arch=all php-symfony-type-info deb php optional arch=all php-symfony-uid deb php optional arch=all php-symfony-unifonic-notifier deb php optional arch=all php-symfony-validator deb php optional arch=all php-symfony-var-dumper deb php optional arch=all php-symfony-var-exporter deb php optional arch=all php-symfony-vonage-notifier deb php optional arch=all php-symfony-web-link deb php optional arch=all php-symfony-web-profiler-bundle deb php optional arch=all php-symfony-webhook deb php optional arch=all php-symfony-whats-app-notifier deb php optional arch=all php-symfony-workflow deb php optional arch=all php-symfony-yaml deb php optional arch=all php-symfony-yunpian-notifier deb php optional arch=all php-symfony-zendesk-notifier deb php optional arch=all php-symfony-zoho-cpaas-mailer deb php optional arch=all php-symfony-zulip-notifier deb php optional arch=all |
| Section | php |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Symfony
Upstream-Contact: Fabien Potencier <fabien@symfony.com>
Source: https://github.com/symfony/symfony
Files-Excluded: src/Symfony/Component/Console/Resources/bin/hiddeninput.exe
Files: *
Copyright: 2004-2023 Fabien Potencier
2020-2022 Paweł Kuna
License: Expat
Files: src/Symfony/Component/CssSelector/*
Copyright: 2004-2023 Fabien Potencier
2007-2012 Ian Bicking and contributors
License: Expat and BSD-3-clause-cssselect
Comment: PHP port of the Python cssselect library
The CssSelector component is a port of the Python cssselect library, which
is copyright 2007-2012 Ian Bicking and contributors. The list of contributors
can be found at: https://github.com/SimonSapin/cssselect/blob/master/AUTHORS
The source of the original Python library is released under BSD 3-clause and
can be found at: https://github.com/SimonSapin/cssselect
Files: src/Symfony/Component/HttpFoundation/Request.php
src/Symfony/Component/HttpFoundation/Tests/ResponseTest.php
Copyright: 2004-2023 Fabien Potencier
2005-2010, 2015-2016 Zend Technologies USA Inc.
License: Expat and BSD-3-clause-zend
Comment: Contains code derived from the Zend Framework.
The Zend Framework is copyright Zend Technologies USA Inc. and released
under BSD 3-clause.
Files: src/Symfony/Component/Finder/Glob.php
src/Symfony/Component/Finder/Comparator/NumberComparator.php
Copyright: 2004-2023 Fabien Potencier
2002 Richard Clamp
License: Expat, and GPL-1+ or Artistic
Comment: Based on the Perl modules Text::Glob and Number::Compare
The Perl modules Text::Glob and Number::Compare module are copyright Richard
Clamp and released under the same terms as Perl itself (GPL-1+ or Artistic).
Files: src/Symfony/Component/HttpKernel/HttpCache/*.php
src/Symfony/Component/HttpKernel/Tests/HttpCache/ResponseCacheStrategyTest.php
Copyright: 2004-2023 Fabien Potencier
2008 Ryan Tomayko
License: Expat
Comment: Partially based on the Rack-Cache library.
The Rack-Cache library is copyright Ryan Tomayko and released under the
MIT (Expat) license.
Files: src/Symfony/Component/Translation/Loader/MoFileLoader.php
Copyright: 2004-2023 Fabien Potencier
2010 Union of RAD
License: Expat
Files: src/Symfony/Component/Translation/Loader/PoFileLoader.php
Copyright: 2004-2023 Fabien Potencier
2012 Clemens Tolboom
2010 Union of RAD
License: Expat
Files: src/Symfony/Bundle/WebProfilerBundle/Resources/fonts/JetBrainsMono.woff2
Copyright: 2020 The JetBrains Mono Project Authors
License: OFL-1.1
Files: src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/base.html.twig
src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/toolbar_js.html.twig
Copyright: 2004-2023 Fabien Potencier
License: Expat and CC-BY-SA-3.0
Comment: Icons created by SensioLabs are shared under CC-BY-SA-3.0.
Files: src/Symfony/Bridge/Twig/Resources/views/Email/zurb_2/main.css
Copyright: 2017 ZURB, inc.
License: Expat
Files: src/Symfony/Bridge/Twig/Tests/Fixtures/assets/images/logo1.png
src/Symfony/Bundle/WebProfilerBundle/Resources/views/Icon/symfony.svg
src/Symfony/Component/ErrorHandler/Resources/assets/images/symfony-logo.svg
src/Symfony/Component/Filesystem/Tests/Fixtures/web/logo_symfony_header.png
src/Symfony/Component/Mime/Tests/Fixtures/web/logo_symfony_header.png
Copyright: 2004-2023 Fabien Potencier
License: CC-BY-SA-3.0
Comment: Icons created by SensioLabs are shared under CC-BY-SA-3.0.
Files: debian/licensing/bin/*
Copyright: 2014-2015 Daniel Beyer
License: Expat
License: Artistic
On Debian GNU/Linux systems, the complete text of the
Artistic License can be found in '/usr/share/common-licenses/Artistic'.
License: BSD-3-clause-cssselect
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:
.
1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in
the documentation and/or other materials provided with the
distribution.
.
3. Neither the name of Ian Bicking nor the names of its contributors may
be used to endorse or promote products derived from this software
without specific prior written permission.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL IAN BICKING OR
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
License: BSD-3-clause-zend
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
.
* Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
.
* Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
.
* Neither the name of Zend Technologies USA, Inc. nor the names of
its contributors may be used to endorse or promote products derived
from this software without specific prior written permission.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
License: CC-BY-SA-3.0
THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CREATIVE
COMMONS PUBLIC LICENSE ("CCPL" OR "LICENSE"). THE WORK IS PROTECTED BY
COPYRIGHT AND/OR OTHER APPLICABLE LAW. ANY USE OF THE WORK OTHER THAN AS
AUTHORIZED UNDER THIS LICENSE OR COPYRIGHT LAW IS PROHIBITED.
.
BY EXERCISING ANY RIGHTS TO THE WORK PROVIDED HERE, YOU ACCEPT AND AGREE
TO BE BOUND BY THE TERMS OF THIS LICENSE. TO THE EXTENT THIS LICENSE MAY
BE CONSIDERED TO BE A CONTRACT, THE LICENSOR GRANTS YOU THE RIGHTS
CONTAINED HERE IN CONSIDERATION OF YOUR ACCEPTANCE OF SUCH TERMS AND
CONDITIONS.
.
1. Definitions
.
a. "Adaptation" means a work based upon the Work, or upon the Work and
other pre-existing works, such as a translation, adaptation,
derivative work, arrangement of music or other alterations of a
literary or artistic work, or phonogram or performance and includes
cinematographic adaptations or any other form in which the Work may be
recast, transformed, or adapted including in any form recognizably
derived from the original, except that a work that constitutes a
Collection will not be considered an Adaptation for the purpose of
this License. For the avoidance of doubt, where the Work is a musical
work, performance or phonogram, the synchronization of the Work in
timed-relation with a moving image ("synching") will be considered an
Adaptation for the purpose of this License.
b. "Collection" means a collection of literary or artistic works, such as
encyclopedias and anthologies, or performances, phonograms or
broadcasts, or other works or subject matter other than works listed
in Section 1(f) below, which, by reason of the selection and
arrangement of their contents, constitute intellectual creations, in
which the Work is included in its entirety in unmodified form along
with one or more other contributions, each constituting separate and
independent works in themselves, which together are assembled into a
collective whole. A work that constitutes a Collection will not be
considered an Adaptation (as defined below) for the purposes of this
License.
c. "Creative Commons Compatible License" means a license that is listed
at http://creativecommons.org/compatiblelicenses that has been
approved by Creative Commons as being essentially equivalent to this
License, including, at a minimum, because that license: (i) contains
terms that have the same purpose, meaning and effect as the License
Elements of this License; and, (ii) explicitly permits the relicensing
of adaptations of works made available under that license under this
License or a Creative Commons jurisdiction license with the same
License Elements as this License.
d. "Distribute" means to make available to the public the original and
copies of the Work or Adaptation, as appropriate, through sale or
other transfer of ownership.
e. "License Elements" means the following high-level license attributes
as selected by Licensor and indicated in the title of this License:
Attribution, ShareAlike.
f. "Licensor" means the individual, individuals, entity or entities that
offer(s) the Work under the terms of this License.
g. "Original Author" means, in the case of a literary or artistic work,
the individual, individuals, entity or entities who created the Work
or if no individual or entity can be identified, the publisher; and in
addition (i) in the case of a performance the actors, singers,
musicians, dancers, and other persons who act, sing, deliver, declaim,
play in, interpret or otherwise perform literary or artistic works or
expressions of folklore; (ii) in the case of a phonogram the producer
being the person or legal entity who first fixes the sounds of a
performance or other sounds; and, (iii) in the case of broadcasts, the
organization that transmits the broadcast.
h. "Work" means the literary and/or artistic work offered under the terms
of this License including without limitation any production in the
literary, scientific and artistic domain, whatever may be the mode or
form of its expression including digital form, such as a book,
pamphlet and other writing; a lecture, address, sermon or other work
of the same nature; a dramatic or dramatico-musical work; a
choreographic work or entertainment in dumb show; a musical
composition with or without words; a cinematographic work to which are
assimilated works expressed by a process analogous to cinematography;
a work of drawing, painting, architecture, sculpture, engraving or
lithography; a photographic work to which are assimilated works
expressed by a process analogous to photography; a work of applied
art; an illustration, map, plan, sketch or three-dimensional work
relative to geography, topography, architecture or science; a
performance; a broadcast; a phonogram; a compilation of data to the
extent it is protected as a copyrightable work; or a work performed by
a variety or circus performer to the extent it is not otherwise
considered a literary or artistic work.
i. "You" means an individual or entity exercising rights under this
License who has not previously violated the terms of this License with
respect to the Work, or who has received express permission from the
Licensor to exercise rights under this License despite a previous
violation.
j. "Publicly Perform" means to perform public recitations of the Work and
to communicate to the public those public recitations, by any means or
process, including by wire or wireless means or public digital
performances; to make available to the public Works in such a way that
members of the public may access these Works from a place and at a
place individually chosen by them; to perform the Work to the public
by any means or process and the communication to the public of the
performances of the Work, including by public digital performance; to
broadcast and rebroadcast the Work by any means including signs,
sounds or images.
k. "Reproduce" means to make copies of the Work by any means including
without limitation by sound or visual recordings and the right of
fixation and reproducing fixations of the Work, including storage of a
protected performance or phonogram in digital form or other electronic
medium.
.
2. Fair Dealing Rights. Nothing in this License is intended to reduce,
limit, or restrict any uses free from copyright or rights arising from
limitations or exceptions that are provided for in connection with the
copyright protection under copyright law or other applicable laws.
.
3. License Grant. Subject to the terms and conditions of this License,
Licensor hereby grants You a worldwide, royalty-free, non-exclusive,
perpetual (for the duration of the applicable copyright) license to
exercise the rights in the Work as stated below:
.
a. to Reproduce the Work, to incorporate the Work into one or more
Collections, and to Reproduce the Work as incorporated in the
Collections;
b. to create and Reproduce Adaptations provided that any such Adaptation,
including any translation in any medium, takes reasonable steps to
clearly label, demarcate or otherwise identify that changes were made
to the original Work. For example, a translation could be marked "The
original work was translated from English to Spanish," or a
modification could indicate "The original work has been modified.";
c. to Distribute and Publicly Perform the Work including as incorporated
in Collections; and,
d. to Distribute and Publicly Perform Adaptations.
e. For the avoidance of doubt:
.
i. Non-waivable Compulsory License Schemes. In those jurisdictions in
which the right to collect royalties through any statutory or
compulsory licensing scheme cannot be waived, the Licensor
reserves the exclusive right to collect such royalties for any
exercise by You of the rights granted under this License;
ii. Waivable Compulsory License Schemes. In those jurisdictions in
which the right to collect royalties through any statutory or
compulsory licensing scheme can be waived, the Licensor waives
the exclusive right to collect such royalties for any exercise by
You of the rights granted under this License; and,
iii. Voluntary License Schemes. The Licensor waives the right to
collect royalties, whether individually or, in the event that
the Licensor is a member of a collecting society that
administers voluntary licensing schemes, via that society, from
any exercise by You of the rights granted under this License.
.
The above rights may be exercised in all media and formats whether now
known or hereafter devised. The above rights include the right to make
such modifications as are technically necessary to exercise the rights in
other media and formats. Subject to Section 8(f), all rights not expressly
granted by Licensor are hereby reserved.
.
4. Restrictions. The license granted in Section 3 above is expressly made
subject to and limited by the following restrictions:
.
a. You may Distribute or Publicly Perform the Work only under the terms
of this License. You must include a copy of, or the Uniform Resource
Identifier (URI) for, this License with every copy of the Work You
Distribute or Publicly Perform. You may not offer or impose any terms
on the Work that restrict the terms of this License or the ability of
the recipient of the Work to exercise the rights granted to that
recipient under the terms of the License. You may not sublicense the
Work. You must keep intact all notices that refer to this License and
to the disclaimer of warranties with every copy of the Work You
Distribute or Publicly Perform. When You Distribute or Publicly
Perform the Work, You may not impose any effective technological
measures on the Work that restrict the ability of a recipient of the
Work from You to exercise the rights granted to that recipient under
the terms of the License. This Section 4(a) applies to the Work as
incorporated in a Collection, but this does not require the Collection
apart from the Work itself to be made subject to the terms of this
License. If You create a Collection, upon notice from any Licensor You
must, to the extent practicable, remove from the Collection any credit
as required by Section 4(c), as requested. If You create an
Adaptation, upon notice from any Licensor You must, to the extent
practicable, remove from the Adaptation any credit as required by
Section 4(c), as requested.
b. You may Distribute or Publicly Perform an Adaptation only under the
terms of: (i) this License; (ii) a later version of this License with
the same License Elements as this License; (iii) a Creative Commons
jurisdiction license (either this or a later license version) that
contains the same License Elements as this License (e.g.,
Attribution-ShareAlike 3.0 US)); (iv) a Creative Commons Compatible
License. If you license the Adaptation under one of the licenses
mentioned in (iv), you must comply with the terms of that license. If
you license the Adaptation under the terms of any of the licenses
mentioned in (i), (ii) or (iii) (the "Applicable License"), you must
comply with the terms of the Applicable License generally and the
following provisions: (I) You must include a copy of, or the URI for,
the Applicable License with every copy of each Adaptation You
Distribute or Publicly Perform; (II) You may not offer or impose any
terms on the Adaptation that restrict the terms of the Applicable
License or the ability of the recipient of the Adaptation to exercise
the rights granted to that recipient under the terms of the Applicable
License; (III) You must keep intact all notices that refer to the
Applicable License and to the disclaimer of warranties with every copy
of the Work as included in the Adaptation You Distribute or Publicly
Perform; (IV) when You Distribute or Publicly Perform the Adaptation,
You may not impose any effective technological measures on the
Adaptation that restrict the ability of a recipient of the Adaptation
from You to exercise the rights granted to that recipient under the
terms of the Applicable License. This Section 4(b) applies to the
Adaptation as incorporated in a Collection, but this does not require
the Collection apart from the Adaptation itself to be made subject to
the terms of the Applicable License.
c. If You Distribute, or Publicly Perform the Work or any Adaptations or
Collections, You must, unless a request has been made pursuant to
Section 4(a), keep intact all copyright notices for the Work and
provide, reasonable to the medium or means You are utilizing: (i) the
name of the Original Author (or pseudonym, if applicable) if supplied,
and/or if the Original Author and/or Licensor designate another party
or parties (e.g., a sponsor institute, publishing entity, journal) for
attribution ("Attribution Parties") in Licensor's copyright notice,
terms of service or by other reasonable means, the name of such party
or parties; (ii) the title of the Work if supplied; (iii) to the
extent reasonably practicable, the URI, if any, that Licensor
specifies to be associated with the Work, unless such URI does not
refer to the copyright notice or licensing information for the Work;
and (iv) , consistent with Ssection 3(b), in the case of an
Adaptation, a credit identifying the use of the Work in the Adaptation
(e.g., "French translation of the Work by Original Author," or
"Screenplay based on original Work by Original Author"). The credit
required by this Section 4(c) may be implemented in any reasonable
manner; provided, however, that in the case of a Adaptation or
Collection, at a minimum such credit will appear, if a credit for all
contributing authors of the Adaptation or Collection appears, then as
part of these credits and in a manner at least as prominent as the
credits for the other contributing authors. For the avoidance of
doubt, You may only use the credit required by this Section for the
purpose of attribution in the manner set out above and, by exercising
Your rights under this License, You may not implicitly or explicitly
assert or imply any connection with, sponsorship or endorsement by the
Original Author, Licensor and/or Attribution Parties, as appropriate,
of You or Your use of the Work, without the separate, express prior
written permission of the Original Author, Licensor and/or Attribution
Parties.
d. Except as otherwise agreed in writing by the Licensor or as may be
otherwise permitted by applicable law, if You Reproduce, Distribute or
Publicly Perform the Work either by itself or as part of any
Adaptations or Collections, You must not distort, mutilate, modify or
take other derogatory action in relation to the Work which would be
prejudicial to the Original Author's honor or reputation. Licensor
agrees that in those jurisdictions (e.g. Japan), in which any exercise
of the right granted in Section 3(b) of this License (the right to
make Adaptations) would be deemed to be a distortion, mutilation,
modification or other derogatory action prejudicial to the Original
Author's honor and reputation, the Licensor will waive or not assert,
as appropriate, this Section, to the fullest extent permitted by the
applicable national law, to enable You to reasonably exercise Your
right under Section 3(b) of this License (right to make Adaptations)
but not otherwise.
.
5. Representations, Warranties and Disclaimer
.
UNLESS OTHERWISE MUTUALLY AGREED TO BY THE PARTIES IN WRITING, LICENSOR
OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY
KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE,
INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTIBILITY,
FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF
LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS,
WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION
OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU.
.
6. Limitation on Liability. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE
LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR
ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES
ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS
BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
.
7. Termination
.
a. This License and the rights granted hereunder will terminate
automatically upon any breach by You of the terms of this License.
Individuals or entities who have received Adaptations or Collections
from You under this License, however, will not have their licenses
terminated provided such individuals or entities remain in full
compliance with those licenses. Sections 1, 2, 5, 6, 7, and 8 will
survive any termination of this License.
b. Subject to the above terms and conditions, the license granted here is
perpetual (for the duration of the applicable copyright in the Work).
Notwithstanding the above, Licensor reserves the right to release the
Work under different license terms or to stop distributing the Work at
any time; provided, however that any such election will not serve to
withdraw this License (or any other license that has been, or is
required to be, granted under the terms of this License), and this
License will continue in full force and effect unless terminated as
stated above.
.
8. Miscellaneous
.
a. Each time You Distribute or Publicly Perform the Work or a Collection,
the Licensor offers to the recipient a license to the Work on the same
terms and conditions as the license granted to You under this License.
b. Each time You Distribute or Publicly Perform an Adaptation, Licensor
offers to the recipient a license to the original Work on the same
terms and conditions as the license granted to You under this License.
c. If any provision of this License is invalid or unenforceable under
applicable law, it shall not affect the validity or enforceability of
the remainder of the terms of this License, and without further action
by the parties to this agreement, such provision shall be reformed to
the minimum extent necessary to make such provision valid and
enforceable.
d. No term or provision of this License shall be deemed waived and no
breach consented to unless such waiver or consent shall be in writing
and signed by the party to be charged with such waiver or consent.
e. This License constitutes the entire agreement between the parties with
respect to the Work licensed here. There are no understandings,
agreements or representations with respect to the Work not specified
here. Licensor shall not be bound by any additional provisions that
may appear in any communication from You. This License may not be
modified without the mutual written agreement of the Licensor and You.
f. The rights granted under, and the subject matter referenced, in this
License were drafted utilizing the terminology of the Berne Convention
for the Protection of Literary and Artistic Works (as amended on
September 28, 1979), the Rome Convention of 1961, the WIPO Copyright
Treaty of 1996, the WIPO Performances and Phonograms Treaty of 1996
and the Universal Copyright Convention (as revised on July 24, 1971).
These rights and subject matter take effect in the relevant
jurisdiction in which the License terms are sought to be enforced
according to the corresponding provisions of the implementation of
those treaty provisions in the applicable national law. If the
standard suite of rights granted under applicable copyright law
includes additional rights not granted under this License, such
additional rights are deemed to be included in the License; this
License is not intended to restrict the license of any rights under
applicable law.
License: Expat
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is furnished
to do so, subject to the following conditions:
.
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.
License: GPL-1+
On Debian GNU/Linux systems, the complete text of the GNU General
Public License can be found in '/usr/share/common-licenses/GPL-1'.
License: OFL-1.1
PREAMBLE
The goals of the Open Font License (OFL) are to stimulate worldwide
development of collaborative font projects, to support the font creation
efforts of academic and linguistic communities, and to provide a free and
open framework in which fonts may be shared and improved in partnership
with others.
.
The OFL allows the licensed fonts to be used, studied, modified and
redistributed freely as long as they are not sold by themselves. The
fonts, including any derivative works, can be bundled, embedded,
redistributed and/or sold with any software provided that any reserved
names are not used by derivative works. The fonts and derivatives,
however, cannot be released under any other type of license. The
requirement for fonts to remain under this license does not apply
to any document created using the fonts or their derivatives.
.
DEFINITIONS
"Font Software" refers to the set of files released by the Copyright
Holder(s) under this license and clearly marked as such. This may
include source files, build scripts and documentation.
.
"Reserved Font Name" refers to any names specified as such after the
copyright statement(s).
.
"Original Version" refers to the collection of Font Software components as
distributed by the Copyright Holder(s).
.
"Modified Version" refers to any derivative made by adding to, deleting,
or substituting -- in part or in whole -- any of the components of the
Original Version, by changing formats or by porting the Font Software to a
new environment.
.
"Author" refers to any designer, engineer, programmer, technical
writer or other person who contributed to the Font Software.
.
PERMISSION & CONDITIONS
Permission is hereby granted, free of charge, to any person obtaining
a copy of the Font Software, to use, study, copy, merge, embed, modify,
redistribute, and sell modified and unmodified copies of the Font
Software, subject to the following conditions:
.
1) Neither the Font Software nor any of its individual components,
in Original or Modified Versions, may be sold by itself.
.
2) Original or Modified Versions of the Font Software may be bundled,
redistributed and/or sold with any software, provided that each copy
contains the above copyright notice and this license. These can be
included either as stand-alone text files, human-readable headers or
in the appropriate machine-readable metadata fields within text or
binary files as long as those fields can be easily viewed by the user.
.
3) No Modified Version of the Font Software may use the Reserved Font
Name(s) unless explicit written permission is granted by the corresponding
Copyright Holder. This restriction only applies to the primary font name as
presented to the users.
.
4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
Software shall not be used to promote, endorse or advertise any
Modified Version, except to acknowledge the contribution(s) of the
Copyright Holder(s) and the Author(s) or with their explicit written
permission.
.
5) The Font Software, modified or unmodified, in part or in whole,
must be distributed entirely under this license, and must not be
distributed under any other license. The requirement for fonts to
remain under this license does not apply to any document created
using the Font Software.
.
TERMINATION
This license becomes null and void if any of the above conditions are
not met.
.
DISCLAIMER
THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
OTHER DEALINGS IN THE FONT SOFTWARE.
DFSG Assistant LLM REVIEW 2 blocker, 3 important, 3 minor
This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.
Reviewed 1 hour ago.
Report
DFSG NEW review for symfony version 8.2.0~beta1+dfsg-1
Summary
- Licensing is DFSG-compliant and
debian/copyrightis accurate: No - Packaging is of good quality: Yes
- Issues: 2 blocker, 3 important, 3 minor
- debian/watch: version 5
- debian/copyright: machine-readable
- Scan before the review: 26 found
Licensing
The licences found in the tree are all free (Expat/MIT, BSD-3-clause, OFL-1.1, CC-BY-SA-3.0, Apache-2.0 and MPL-2.0), and no non-free term was found; the "non-commercial" hits are descriptive prose, not licence clauses. debian/copyright is DEP-5, but it is materially incomplete: the OASIS XLIFF and W3C XML schemas carry third-party terms ("All rights reserved") that the file does not mention, the minified Mermaid bundle shipped in php-symfony-web-profiler-bundle contains DOMPurify, js-yaml, lodash and Mermaid code with no stanza and no source in the package, and several holders of embedded code (Facebook, Zend in Contracts, William Durand, the normalize.css/modern-normalize authors) are missing. The Intl/Emoji locale data generated from ICU/CLDR is recorded only as Fabien Potencier's Expat work, and the Debian packaging files are attributed to Fabien Potencier because there is no Files: debian/* stanza.
Packaging
This is mature, well-structured packaging: debhelper compat 14 with dh-sequence-phpcomposer, one binary per component plus bridges, a full Build-Depends-Indep test set, an autopkgtest that runs the suite against the installed packages, DEP-3 patch series, correct Vcs-* fields and Standards-Version 4.7.4 against Policy 4.7.4.1. Only minor defects were found: nine KeyManagement bridge packages describe themselves as integration "for Symfony Lock", and two entries of debian/pkg-php-tools-autoloaders end in a stray quote. No maintainer scripts or other policy problems were found.
Issues
blocker licensing 1. OASIS XLIFF schemas are licensed under nothing recorded here: xliff-core-2.0.xsd says "All rights reserved", and debian/copyright calls them Expat ◂
- Files:
debian/copyright:7-10,src/Symfony/Component/Translation/Resources/schemas/xliff-core-2.0.xsd:5-8,src/Symfony/Component/Translation/Resources/schemas/xliff-core-1.2-transitional.xsd:1-30,src/Symfony/Component/Translation/Resources/schemas/xliff-core-2.2.xsd:4-6,src/Symfony/Component/Translation/Resources/schemas/xml.xsd:1-40 - Basis: checked, in the package or with a reference tool
- Evidence: xliff-core-2.0.xsd has
Copyright (c) OASIS Open 2014. All rights reserved.andOASIS Standardwith no licence grant; xliff-core-1.2-transitional.xsd and xliff-core-2.2.xsd carry no copyright or licence statement at all; xml.xsd (the W3C XML-namespace schema) has none either. debian/copyright's catch-all saysFiles: */Copyright: 2004-2023 Fabien Potencier/License: Expat. - Problem: The four schema files are third-party works from OASIS and the W3C. They ship in php-symfony-translation (debian/rules installs
$src_path/*without excluding Resources/schemas), but the only licence recorded for them is the catch-all Expat/Fabien Potencier stanza, which is wrong. The terms that would allow Debian to redistribute and modify them are nowhere in the package, so Policy 12.5's requirement of a verbatim copy of each distribution licence is unmet and their DFSG status cannot be established from the package. - Fix: Add Files stanzas naming OASIS Open and the W3C with the applicable licence terms (the OASIS and W3C licences are not in /usr/share/common-licenses, so reproduce their text). If the OASIS terms do not permit modification, the schemas cannot be shipped in main and must be replaced or dropped.
blocker licensing 2. mermaid-flowchart-v2.min.js bundles Mermaid, DOMPurify, js-yaml and lodash code that debian/copyright does not record, and ships without source ◂
- Files:
src/Symfony/Bundle/WebProfilerBundle/Resources/views/Script/Mermaid/mermaid-flowchart-v2.min.js:418,432-448,src/Symfony/Bundle/WebProfilerBundle/Resources/views/Script/Mermaid/Makefile:4-16,debian/copyright:7-10 - Basis: checked, in the package or with a reference tool
- Evidence: The bundle ends with
/*! Bundled license information:...DOMPurify 3.2.6 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0...js-yaml 4.1.0 ... @license MIT...Lodash ... Copyright OpenJS Foundation and other contributors ... Released under MIT license, and its embedded package.json hasauthor:"Knut Sveidqvist",license:"MIT"(mermaid). The Makefile only records how to fetch and rebuild it:curl ... mermaid@11.12.0.tar.gzthenpnpm ... run build:mermaidandcp repo-$(tag)/packages/tiny/dist/mermaid.tiny.js $@. - Problem: This minified file is installed (debian/rules' generic branch installs Resources/views/Script/Mermaid), but debian/copyright has no stanza for it:
Files: *applies Expat and Fabien Potencier to it, omitting the Mermaid, Cure53/DOMPurify, js-yaml and OpenJS/lodash copyrights and the Apache-2.0 and MPL-2.0 licences. At the same time the preferred form for modification is not in the package - only a Makefile that downloads it - so DFSG 2 (source) is not satisfied either. - Fix: Add a Files stanza for the file naming Knut Sveidqvist (MIT), Cure53 (Apache-2.0 and MPL-2.0), the js-yaml authors (MIT) and the OpenJS Foundation (MIT), pointing at /usr/share/common-licenses/Apache-2.0 and MPL-2.0; and ship the Mermaid sources the file was built from (or drop/replace the bundle).
important licensing 3. Files: * does not name Facebook, Inc., Zend Technologies in Contracts, William Durand, Sindre Sorhus, Nicolas Gallagher or Jonathan Neal ◂
- Files:
debian/copyright:7-10,debian/copyright:23-27,src/Symfony/Component/String/ByteString.php:41-43,src/Symfony/Contracts/Translation/TranslatorTrait.php:135-137,src/Symfony/Component/HttpFoundation/JsonResponse.php:81-83,src/Symfony/Component/ErrorHandler/Resources/assets/css/exception.css:107,src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/profiler.css.twig:3-4 - Basis: checked, in the package or with a reference tool
- Evidence:
Copyright (c) 2004-2020, Facebook, Inc.(ByteString.php, Hack Standard Library, MIT);Copyright (c) 2005-2010 Zend Technologies USA Inc.(Contracts/Translation/TranslatorTrait.php, new BSD);partially taken from https://github.com/willdurand/JsonpCallbackValidator ... (c) William Durand(JsonResponse.php);modern-normalize v3.0.1 | MIT License | https://github.com/sindresorhus/modern-normalize(exception.css);normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css(profiler.css.twig). - Problem: The catch-all stanza names only Fabien Potencier and Paweł Kuna, so all these embedded third-party notices are mis-attributed. The Zend stanza lists only HttpFoundation/Request.php and Tests/ResponseTest.php and does not cover the equivalent Zend-derived code that moved to Contracts/Translation/TranslatorTrait.php. MIT and BSD require the copyright notices to be reproduced, so the copyright file is inaccurate and incomplete for shipped code.
- Fix: Add the holders to the appropriate stanzas (extend the Zend stanza to src/Symfony/Contracts/Translation/TranslatorTrait.php; add stanzas or holders for Facebook, Inc., William Durand, Sindre Sorhus, and Nicolas Gallagher and Jonathan Neal).
important licensing 4. Intl and Emoji data generated from ICU and CLDR is recorded only as Fabien Potencier's Expat work ◂
- Files:
debian/copyright:7-10,src/Symfony/Component/Intl/Resources/data/git-info.txt:4,src/Symfony/Component/Intl/Resources/bin/update-data.php:75,src/Symfony/Component/Emoji/Resources/bin/Makefile:9,14,src/Symfony/Component/Emoji/Resources/bin/README.md:14 - Basis: inferred from what was read, not seen directly
- Evidence: Intl/Resources/data/git-info.txt:
URL: https://github.com/unicode-org/icu.git/Revision: ddc6b669...; Emoji/Resources/bin/Makefile fetcheshttps://unicode.org/Public/emoji/latest/emoji-test.txtand the README says to updateunicode-org/cldr. debian/copyright'sFiles: *gives themCopyright: 2004-2023 Fabien PotencierandLicense: Expat. - Problem: The thousands of files in Intl/Resources/data and Emoji/Resources/data are derived from ICU and CLDR, which are under the Unicode licence, not Expat. That licence requires its copyright and permission notice to accompany copies of the data, and it is not in /usr/share/common-licenses; the copyright file mentions neither Unicode, Inc. nor the licence.
- Fix: Add a stanza for the generated data with
Copyright: 1991-... Unicode, Inc.and the Unicode licence text (as shipped by ICU/CLDR), and state there that the files are generated from ICU/CLDR.
important licensing 5. There is no Files: debian/* stanza, so debian/rules, control, changelog, patches and the image checksum file are attributed to Fabien Potencier ◂
- Files:
debian/copyright:7-10,debian/copyright:84-86 - Basis: checked, in the package or with a reference tool
- Evidence: The only Debian stanza is
Files: debian/licensing/bin/*/Copyright: 2014-2015 Daniel Beyer/License: Expat; everything else under debian/ falls through toFiles: */Copyright: 2004-2023 Fabien Potencier. - Problem: debian/rules, debian/control, debian/changelog, debian/patches/*, debian/clean, the .install/.links files and debian/licensing/image-checksums.dcf are David Prévot's and Daniel Beyer's work; the catch-all stanza claims Fabien Potencier holds their copyright and their licence is not stated. Policy 12.5 requires a verbatim copy of the distribution licence(s), and this makes the per-file information wrong.
- Fix: Add a
Files: debian/*stanza with the packaging copyright holders (Daniel Beyer, David Prévot) andLicense: Expat, folding debian/licensing/bin/* into it or keeping it as an override.
minor
licensing
6. The Finder stanza's License expression Expat, and GPL-1+ or Artistic has a comma that the licence-expression syntax does not allow
◂
- Files:
debian/copyright:36 - Basis: inferred from what was read, not seen directly
- Evidence:
License: Expat, and GPL-1+ or Artistic - Problem: In the License field, licences are combined only with
and,orand parentheses (copyright-format 6.7 and the short-name rules in 7.1); a comma is not part of that grammar, so the value is not parseable as an expression and tools see the short nameExpat,. - Fix: Write
License: Expat and (GPL-1+ or Artistic).
minor packaging 7. Nine key-management bridge packages describe themselves as integration "for Symfony Lock" ◂
- Files:
debian/control:1141,debian/control:1154,debian/control:1167,debian/control:1180,debian/control:1193,debian/control:1206,debian/control:1219,debian/control:1232,debian/control:1245 - Basis: checked, in the package or with a reference tool
- Evidence:
The ${phpcomposer:description} provides AWS integration for Symfony Lock.(and the Azure Key Vault, Doctrine DBAL, Doctrine ORM, Flysystem, Google Cloud, HashiCorp Vault, KMIP and Scaleway variants). The corresponding source, src/Symfony/Component/KeyManagement/Bridge/AwsKms/composer.json, is"name": "symfony/aws-key-management","description": "Symfony AWS Key Management Bridge". - Problem: These packages install src/Symfony/Component/KeyManagement/Bridge/*, not Lock; the copy-pasted description names the wrong component, which apt shows to users.
- Fix: Replace
for Symfony Lockwithfor Symfony KeyManagementin those nine descriptions.
minor packaging 8. Two entries of debian/pkg-php-tools-autoloaders end in a stray quote ◂
- Files:
debian/pkg-php-tools-autoloaders:128-129 - Basis: inferred from what was read, not seen directly
- Evidence:
symfony\t\tprelude-notifier\t\tSymfony/Component/Notifier/Bridge/Prelude/autoload.php';and the same forprimotexto-notifier - Problem: The trailing
'becomes part of the third field, so a consumer of this file (dh_phpcomposer reads debian/pkg-php-tools-autoloaders) registers the autoload path.../autoload.php';, which does not exist for the Prelude and Primotexto notifier bridges. - Fix: Delete the two trailing quotes.
Verified ◂
- All of debian/ was read: control, rules, changelog, copyright, source/format, install and the per-package .install/.links files, docs, clean, tests/control and tests/phpunit, patches/series (41 patches plus the commented DEP-8 patch), gbp.conf, README.source, upstream/metadata, pkg-php-tools-autoloaders, pkg-php-tools-overrides, the lintian overrides and debian/licensing/*. There are no maintainer scripts and no *.maintscript files.
- The top-level LICENSE and every per-component and per-bridge LICENSE file are the same Expat text with
Copyright (c) 2004-present Fabien Potencier; debian/copyright's Expat text matches it. - Built gettext catalogues: src/Symfony/Component/Translation/Tests/Fixtures/empty-translation.mo, src/Symfony/Component/Translation/Tests/Fixtures/plurals.mo and src/Symfony/Component/Translation/Tests/Fixtures/resources.mo are compiled from empty-translation.po, plurals.po and resources.po in the same directory.
- Archives, all test input data: src/Symfony/Component/HttpFoundation/Tests/File/Fixtures/case-sensitive-mime-type.xlsm (MIME detection), src/Symfony/Component/Mime/Tests/Fixtures/test.docx (MIME parsing) and src/Symfony/Component/Translation/Bridge/Lokalise/Tests/Fixtures/Symfony-locale.zip (Lokalise provider fixture); nothing is generated from them during the build.
- ICU resource bundles under Intl: src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/en.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/alias.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/mo.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/ro.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/ro_MD.res and src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/root.res are genrb output rebuilt by src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/build.sh from the txt/*.txt files beside them; the Writer fixtures src/Symfony/Component/Intl/Tests/Data/Bundle/Writer/Fixtures/en.res and rb.res have en.txt and rb.txt beside them.
- Translation ResourceBundle fixtures: src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/dat/en.res, src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/dat/fr.res, src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/dat/resources.dat and src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/res/en.res are compiled bundles whose input en.txt, fr.txt and packagelist.txt are in the dat/ directory.
- src/Symfony/Bridge/PhpUnit/Tests/DeprecationErrorHandler/deprecation.phar is built by generate_phar.php in that directory from the deprecation/ directory, so its source is present.
- src/Symfony/Component/Config/Tests/Fixtures/some.phar is a test fixture for GlobResourceTest.php; it is a phar (a container of plain PHP, not compiled code) holding a stub, ProjectWithXsdExtensionInPhar.php and schema/project-1.0.xsd, used to exercise phar:// globbing.
- src/Symfony/Component/Security/Core/Tests/Authentication/Token/Fixtures/switch-user-token-4.4.txt is a serialized session-token fixture for the 4.4 BC test, not a programme or a licence-bearing work.
- The scan's four "commercial use" hits are not licence terms: src/Symfony/Bundle/WebProfilerBundle/Resources/fonts/LICENSE.txt is the JetBrains Mono statement that the OFL-1.1 font can be used for commercial and non-commercial purposes, and the lines in src/Symfony/Component/Notifier/Bridge/Isendpro/README.md, src/Symfony/Component/Notifier/Bridge/OvhCloud/README.md and src/Symfony/Component/Notifier/Bridge/OvhCloud/CHANGELOG.md describe an SMS "STOP clause" option.
- The scan's unmatched holders are string literals, not copyright holders: "Tom & Jerry © 2026" is a test string in src/Symfony/Component/Translation/Tests/HtmlTranslatorTest.php:69, and
'Copyright 1999'and'([0-9]+)'are a replace() input and regex in src/Symfony/Component/String/Tests/AbstractAsciiTestCase.php:1105-1107. The Facebook, Inc. match is real and is reported. - The minified file src/Symfony/Bundle/WebProfilerBundle/Resources/views/Script/Mermaid/mermaid-flowchart-v2.min.js is reported as an issue; it is the only .min.js in the tree.
- src/Symfony/Component/Console/Resources/bin/hiddeninput.exe named in Files-Excluded is absent, matching README.source's explanation that it was removed for unclear licensing.
- Image licensing is enforced at build time: debian/rules runs debian/licensing/bin/check_image_licenses --check, which requires every png/gif/svg in src (including embedded base64/svg data) to be registered in debian/licensing/image-checksums.dcf and to resolve to the same licence in debian/copyright; the dcf entries and the Files stanzas for the logos and Tabler icons are consistent.
- The third-party code that debian/copyright does cover was checked against its notices: CssSelector (BSD-3-clause-cssselect), HttpFoundation/Request.php and Tests/ResponseTest.php (BSD-3-clause-zend), Finder/Glob.php and Comparator/NumberComparator.php (Richard Clamp, GPL-1+/Artistic), HttpCache (Rack-Cache, Expat), Mo/PoFileLoader (Union of RAD, Clemens Tolboom), zurb_2/main.css (ZURB), JetBrainsMono.woff2 (OFL-1.1) and the SensioLabs/Symfony logos (CC-BY-SA-3.0); all license texts needed are present in full or point to /usr/share/common-licenses.
- debian/control's 200+ binaries all are Architecture: all; Build-Depends/Indep packages checked in the archive exist (pkg-php-tools provides dh-sequence-phpcomposer; fonts-jetbrains-mono-web, php-symfony-polyfill-php85, php-tempest-highlight and php-pda-pheanstalk are present).
- debhelper compat 14: the debhelper tool confirms that from compat 13 dh skips override_dh_auto_test under DEB_BUILD_OPTIONS=nocheck, so the test override in debian/rules needs no nocheck test of its own; ${phpcomposer:*} and ${misc:Depends} are added by dh_gencontrol at compat 14.
- The three patches read in full (Add-more-tests-to-group-tty, Use-installed-files-for-CI, Assume-php-async-aws-sqs-2) carry DEP-3 From/Date/Subject headers with Forwarded fields; the series is complete and the DEP-8 patch is intentionally commented out and applied by debian/tests/phpunit.
- debian/tests/control is a valid autopkgtest control: Tests: phpunit, Restrictions: allow-stderr, rw-build-tree, and the trailing @ pulls in the source's binary packages; the script applies and reverses debian/DEP-8/Tests-against-installed-classes.patch with patch (listed in Depends).
- Standards-Version 4.7.4 against Policy 4.7.4.1: the first two components match, so it is current; Vcs-Browser/Vcs-Git point at the pkg-php-pear salsa repository, and upstream/metadata records Repository, Bug-* and Security-Contact.
- debian/changelog's top entry (8.2.0~beta1+dfsg-1, experimental) matches the .dsc version; the new binary packages it announces exist in debian/control.
- No non-free wording was found beyond the reported schema notices: searches for
All rights reserved,public domain, no-modification and non-commercial clauses found nothing else in src/. - uscan found the packaged version as the newest upstream release (upstream
8.2.0~beta1, packaged8.2.0~beta1+dfsg). - Every pointer of
debian/copyrightto /usr/share/common-licenses names a file that is there (Artistic,GPL-1).
Not confirmed ◂
- The contents of src/Symfony/Component/Config/Tests/Fixtures/some.phar could not be inspected (binary); its role was judged from GlobResourceTest.php and from the phar being a container of PHP.
- The OASIS and W3C licence texts that apply to the XLIFF and xml schemas are not in the package and were not read; only the fact that the package records no licence for them was checked.
- Whether dh_phpcomposer actually installs or consumes debian/pkg-php-tools-autoloaders, and so whether the stray quotes break an installed autoloader, could not be checked: pkg-php-tools is not installed on the reviewing system.
- That the Intl/Emoji data files fall under the Unicode licence rather than Symfony's Expat is inferred from their generation from unicode-org/icu and unicode-org/cldr; the Unicode licence itself is not shipped with the package.
Proposed changes ◂
None.
Uploader's response to the LLM review
Waiting for the uploader's response until , because the review found serious issues.
Other Reviews of this Package
| Version | Hash | Allocated | Completed | Reviewer | Status | Details |
|---|---|---|---|---|---|---|
| 8.1.0+dfsg-1 | de6a2e2b… | 2026-06-29 08:34 | 2026-06-29 08:40 | mechtilde | accepted | VIEW |