DFSG NEW Queue

DFSG, Licensing & New Packages Team

symfony 8.2.0~beta1+dfsg-1

Package Information

Descriptionset of reusable components and framework for web projects

${phpcomposer:description} allows one to create websites and web applications. It’s a set of tools and a development methodology.

This package depends on every component. Applications depending on Symfony should rather depend on individual components actually needed by them.

MaintainerDebian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed ByDavid Prévot <taffit@debian.org>
Sponsortaffit@debian.org
Distributionexperimental
Architectureall
VCSgit: https://salsa.debian.org/php-team/pear/symfony.git (browse)
Popcon Installs8491
Binary NEWYes (new binary packages of a source already in sid)
Trackerhttps://tracker.debian.org/pkg/symfony
Uploaded1 hour ago

New Package Report

.changes◂
DateThu, 05 Nov 2026 07:59:52 +0100
Sourcesymfony
Version8.2.0~beta1+dfsg-1
Changed-ByDavid Prévot <taffit@debian.org>
Architecturesource all
Distributionexperimental
Changelog◂
symfony (8.2.0~beta1+dfsg-1) experimental; urgency=medium
 .
   [ Fabien Potencier ]
   * Update VERSION for 8.2.0-BETA1
 .
   [ Nicolas Grekas ]
   * Require v3.8.1 of the contracts
 .
   [ Pascal CESCON - Amoifr ]
   * [Translation] Re-add the POEditor provider bridge
 .
   [ soyuka ]
   * [JsonSchema] Add the component
 .
   [ NewtTheWolf ]
   * [Mailer] Add TurboSMTP bridge
 .
   [ Piero Recchia ]
   * [Notifier] Add the WhatsApp bridge
 .
   [ Mathieu Ledru ]
   * [Notifier] Add the Facebook Page bridge
   * [Notifier] Add the Instagram bridge
   * [Notifier] Add the Threads bridge
 .
   [ Laurent ]
   * [Notifier] Add the SMS Proxima bridge
 .
   [ Florent Morselli ]
   * [KeyManagement] Introduce the KeyManagement component
   * [KeyManagement] Add the AWS, Azure, Google Cloud,
                     HashiCorp Vault and Flysystem bridges
   * [KeyManagement] Add the Doctrine DBAL and ORM bridges
 .
   [ vadage ]
   * [Mailer] Add a bridge for the Cloudflare email service
 .
   [ Alessandro Lai ]
   * [Messenger] Add MongoDB bridge
 .
   [ Gabe (MailKite) ]
   * [Mailer] Add MailKite bridge
 .
   [ Jeroen Moonen ]
   * [Mailer] Add PufferPost bridge
 .
   [ Antonio Pauletich ]
   * [KeyManagement] Add KMIP bridge
 .
   [ Dennis Petersmann ]
   * [Mailer] Add Zoho CPaaS bridge
 .
   [ daFish81 ]
   * [KeyManagement] Add a Scaleway Key Manager bridge
 .
   [ David Prévot ]
   * Add new packages:
     + php-symfony-json-schema
     + php-symfony-key-management
     + php-symfony-aws-key-management
     + php-symfony-azure-keyvault-key-management
     + php-symfony-doctrine-dbal-key-management
     + php-symfony-doctrine-orm-key-management
     + php-symfony-flysystem-key-management
     + php-symfony-google-cloud-key-management
     + php-symfony-hashicorp-vault-key-management
     + php-symfony-kmip-key-management
     + php-symfony-scaleway-key-management
     + php-symfony-cloudflare-mailer
     + php-symfony-mail-kite-mailer
     + php-symfony-puffer-post-mailer
     + php-symfony-turbo-smtp-mailer
     + php-symfony-zoho-cpaas-mailer
     + php-symfony-amp-sql-messenger
     + php-symfony-mongodb-messenger
     + php-symfony-facebook-page-notifier
     + php-symfony-instagram-notifier
     + php-symfony-sms-proxima-notifier
     + php-symfony-threads-notifier
     + php-symfony-whats-app-notifier
     + php-symfony-po-editor-translation-provider
   * Update Homepage documentation URLs
   * Ignore base64 errors
   * Update checksum
   * Update exclusions for phpab
   * New (build-)dependencies:
     + php-amphp-sql
     + php-async-aws-kms
     + php-league-flysystem
     + php-mongodb-mongodb
   * Exclude more tests
.dsc◂
Priorityoptional
Componentmain
Package-Listphp-symfony deb php optional arch=all
php-symfony-aha-send-mailer deb php optional arch=all
php-symfony-all-my-sms-notifier deb php optional arch=all
php-symfony-amazon-dynamo-db-lock deb php optional arch=all
php-symfony-amazon-mailer deb php optional arch=all
php-symfony-amazon-sns-notifier deb php optional arch=all
php-symfony-amazon-sqs-messenger deb php optional arch=all
php-symfony-amp-sql-messenger deb php optional arch=all
php-symfony-amqp-messenger deb php optional arch=all
php-symfony-asset deb php optional arch=all
php-symfony-asset-mapper deb php optional arch=all
php-symfony-aws-key-management deb php optional arch=all
php-symfony-azure-keyvault-key-management deb php optional arch=all
php-symfony-azure-mailer deb php optional arch=all
php-symfony-bandwidth-notifier deb php optional arch=all
php-symfony-beanstalkd-messenger deb php optional arch=all
php-symfony-bluesky-notifier deb php optional arch=all
php-symfony-brevo-mailer deb php optional arch=all
php-symfony-brevo-notifier deb php optional arch=all
php-symfony-browser-kit deb php optional arch=all
php-symfony-cache deb php optional arch=all
php-symfony-chatwork-notifier deb php optional arch=all
php-symfony-click-send-notifier deb php optional arch=all
php-symfony-clickatell-notifier deb php optional arch=all
php-symfony-clock deb php optional arch=all
php-symfony-cloudflare-mailer deb php optional arch=all
php-symfony-config deb php optional arch=all
php-symfony-console deb php optional arch=all
php-symfony-contact-everyone-notifier deb php optional arch=all
php-symfony-crowdin-translation-provider deb php optional arch=all
php-symfony-css-selector deb php optional arch=all
php-symfony-debug-bundle deb php optional arch=all
php-symfony-dependency-injection deb php optional arch=all
php-symfony-discord-notifier deb php optional arch=all
php-symfony-doctrine-bridge deb php optional arch=all
php-symfony-doctrine-dbal-key-management deb php optional arch=all
php-symfony-doctrine-messenger deb php optional arch=all
php-symfony-doctrine-orm-key-management deb php optional arch=all
php-symfony-dom-crawler deb php optional arch=all
php-symfony-dotenv deb php optional arch=all
php-symfony-emoji deb php optional arch=all
php-symfony-engagespot-notifier deb php optional arch=all
php-symfony-error-handler deb php optional arch=all
php-symfony-esendex-notifier deb php optional arch=all
php-symfony-event-dispatcher deb php optional arch=all
php-symfony-expo-notifier deb php optional arch=all
php-symfony-expression-language deb php optional arch=all
php-symfony-facebook-page-notifier deb php optional arch=all
php-symfony-fake-chat-notifier deb php optional arch=all
php-symfony-fake-sms-notifier deb php optional arch=all
php-symfony-filesystem deb php optional arch=all
php-symfony-finder deb php optional arch=all
php-symfony-firebase-notifier deb php optional arch=all
php-symfony-flysystem-key-management deb php optional arch=all
php-symfony-form deb php optional arch=all
php-symfony-forty-six-elks-notifier deb php optional arch=all
php-symfony-framework-bundle deb php optional arch=all
php-symfony-free-mobile-notifier deb php optional arch=all
php-symfony-gateway-api-notifier deb php optional arch=all
php-symfony-go-ip-notifier deb php optional arch=all
php-symfony-google-chat-notifier deb php optional arch=all
php-symfony-google-cloud-key-management deb php optional arch=all
php-symfony-google-mailer deb php optional arch=all
php-symfony-hashicorp-vault-key-management deb php optional arch=all
php-symfony-html-sanitizer deb php optional arch=all
php-symfony-http-client deb php optional arch=all
php-symfony-http-foundation deb php optional arch=all
php-symfony-http-kernel deb php optional arch=all
php-symfony-infobip-mailer deb php optional arch=all
php-symfony-infobip-notifier deb php optional arch=all
php-symfony-instagram-notifier deb php optional arch=all
php-symfony-intl deb php optional arch=all
php-symfony-iqsms-notifier deb php optional arch=all
php-symfony-isendpro-notifier deb php optional arch=all
php-symfony-joli-notif-notifier deb php optional arch=all
php-symfony-json-path deb php optional arch=all
php-symfony-json-schema deb php optional arch=all
php-symfony-json-streamer deb php optional arch=all
php-symfony-kaz-info-teh-notifier deb php optional arch=all
php-symfony-key-management deb php optional arch=all
php-symfony-kmip-key-management deb php optional arch=all
php-symfony-ldap deb php optional arch=all
php-symfony-light-sms-notifier deb php optional arch=all
php-symfony-line-bot-notifier deb php optional arch=all
php-symfony-line-notify-notifier deb php optional arch=all
php-symfony-linked-in-notifier deb php optional arch=all
php-symfony-lock deb php optional arch=all
php-symfony-loco-translation-provider deb php optional arch=all
php-symfony-lokalise-translation-provider deb php optional arch=all
php-symfony-lox24-notifier deb php optional arch=all
php-symfony-mail-kite-mailer deb php optional arch=all
php-symfony-mail-pace-mailer deb php optional arch=all
php-symfony-mailchimp-mailer deb php optional arch=all
php-symfony-mailer deb php optional arch=all
php-symfony-mailer-send-mailer deb php optional arch=all
php-symfony-mailgun-mailer deb php optional arch=all
php-symfony-mailjet-mailer deb php optional arch=all
php-symfony-mailjet-notifier deb php optional arch=all
php-symfony-mailomat-mailer deb php optional arch=all
php-symfony-mailtrap-mailer deb php optional arch=all
php-symfony-mastodon-notifier deb php optional arch=all
php-symfony-matrix-notifier deb php optional arch=all
php-symfony-mattermost-notifier deb php optional arch=all
php-symfony-mercure-notifier deb php optional arch=all
php-symfony-message-bird-notifier deb php optional arch=all
php-symfony-message-media-notifier deb php optional arch=all
php-symfony-messenger deb php optional arch=all
php-symfony-microsoft-graph-mailer deb php optional arch=all
php-symfony-microsoft-teams-notifier deb php optional arch=all
php-symfony-mime deb php optional arch=all
php-symfony-mobyt-notifier deb php optional arch=all
php-symfony-mongodb-messenger deb php optional arch=all
php-symfony-monolog-bridge deb php optional arch=all
php-symfony-notifier deb php optional arch=all
php-symfony-novu-notifier deb php optional arch=all
php-symfony-ntfy-notifier deb php optional arch=all
php-symfony-object-mapper deb php optional arch=all
php-symfony-octopush-notifier deb php optional arch=all
php-symfony-one-signal-notifier deb php optional arch=all
php-symfony-options-resolver deb php optional arch=all
php-symfony-orange-sms-notifier deb php optional arch=all
php-symfony-ovh-cloud-notifier deb php optional arch=all
php-symfony-pager-duty-notifier deb php optional arch=all
php-symfony-password-hasher deb php optional arch=all
php-symfony-phpunit-bridge deb php optional arch=all
php-symfony-phrase-translation-provider deb php optional arch=all
php-symfony-plivo-notifier deb php optional arch=all
php-symfony-po-editor-translation-provider deb php optional arch=all
php-symfony-postal-mailer deb php optional arch=all
php-symfony-postmark-mailer deb php optional arch=all
php-symfony-prelude-notifier deb php optional arch=all
php-symfony-primotexto-notifier deb php optional arch=all
php-symfony-process deb php optional arch=all
php-symfony-property-access deb php optional arch=all
php-symfony-property-info deb php optional arch=all
php-symfony-psr-http-message-bridge deb php optional arch=all
php-symfony-puffer-post-mailer deb php optional arch=all
php-symfony-pushover-notifier deb php optional arch=all
php-symfony-pushy-notifier deb php optional arch=all
php-symfony-rate-limiter deb php optional arch=all
php-symfony-redis-messenger deb php optional arch=all
php-symfony-redlink-notifier deb php optional arch=all
php-symfony-remote-event deb php optional arch=all
php-symfony-resend-mailer deb php optional arch=all
php-symfony-ring-central-notifier deb php optional arch=all
php-symfony-rocket-chat-notifier deb php optional arch=all
php-symfony-routing deb php optional arch=all
php-symfony-runtime deb php optional arch=all
php-symfony-scaleway-key-management deb php optional arch=all
php-symfony-scaleway-mailer deb php optional arch=all
php-symfony-scheduler deb php optional arch=all
php-symfony-security-bundle deb php optional arch=all
php-symfony-security-core deb php optional arch=all
php-symfony-security-csrf deb php optional arch=all
php-symfony-security-http deb php optional arch=all
php-symfony-semaphore deb php optional arch=all
php-symfony-sendberry-notifier deb php optional arch=all
php-symfony-sendgrid-mailer deb php optional arch=all
php-symfony-serializer deb php optional arch=all
php-symfony-sevenio-notifier deb php optional arch=all
php-symfony-simple-textin-notifier deb php optional arch=all
php-symfony-sinch-notifier deb php optional arch=all
php-symfony-sipgate-notifier deb php optional arch=all
php-symfony-slack-notifier deb php optional arch=all
php-symfony-sms-biuras-notifier deb php optional arch=all
php-symfony-sms-factor-notifier deb php optional arch=all
php-symfony-sms-proxima-notifier deb php optional arch=all
php-symfony-sms-sluzba-notifier deb php optional arch=all
php-symfony-smsapi-notifier deb php optional arch=all
php-symfony-smsbox-notifier deb php optional arch=all
php-symfony-smsc-notifier deb php optional arch=all
php-symfony-smsense-notifier deb php optional arch=all
php-symfony-smsmode-notifier deb php optional arch=all
php-symfony-spot-hit-notifier deb php optional arch=all
php-symfony-stopwatch deb php optional arch=all
php-symfony-string deb php optional arch=all
php-symfony-sweego-mailer deb php optional arch=all
php-symfony-sweego-notifier deb php optional arch=all
php-symfony-telegram-notifier deb php optional arch=all
php-symfony-telnyx-notifier deb php optional arch=all
php-symfony-termii-notifier deb php optional arch=all
php-symfony-threads-notifier deb php optional arch=all
php-symfony-translation deb php optional arch=all
php-symfony-tui deb php optional arch=all
php-symfony-turbo-sms-notifier deb php optional arch=all
php-symfony-turbo-smtp-mailer deb php optional arch=all
php-symfony-twig-bridge deb php optional arch=all
php-symfony-twig-bundle deb php optional arch=all
php-symfony-twilio-notifier deb php optional arch=all
php-symfony-twitter-notifier deb php optional arch=all
php-symfony-type-info deb php optional arch=all
php-symfony-uid deb php optional arch=all
php-symfony-unifonic-notifier deb php optional arch=all
php-symfony-validator deb php optional arch=all
php-symfony-var-dumper deb php optional arch=all
php-symfony-var-exporter deb php optional arch=all
php-symfony-vonage-notifier deb php optional arch=all
php-symfony-web-link deb php optional arch=all
php-symfony-web-profiler-bundle deb php optional arch=all
php-symfony-webhook deb php optional arch=all
php-symfony-whats-app-notifier deb php optional arch=all
php-symfony-workflow deb php optional arch=all
php-symfony-yaml deb php optional arch=all
php-symfony-yunpian-notifier deb php optional arch=all
php-symfony-zendesk-notifier deb php optional arch=all
php-symfony-zoho-cpaas-mailer deb php optional arch=all
php-symfony-zulip-notifier deb php optional arch=all
Sectionphp
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Symfony
Upstream-Contact: Fabien Potencier <fabien@symfony.com>
Source: https://github.com/symfony/symfony
Files-Excluded: src/Symfony/Component/Console/Resources/bin/hiddeninput.exe

Files: *
Copyright: 2004-2023 Fabien Potencier
           2020-2022 Paweł Kuna
License: Expat

Files: src/Symfony/Component/CssSelector/*
Copyright: 2004-2023 Fabien Potencier
           2007-2012 Ian Bicking and contributors
License: Expat and BSD-3-clause-cssselect
Comment: PHP port of the Python cssselect library
 The CssSelector component is a port of the Python cssselect library, which
 is copyright 2007-2012 Ian Bicking and contributors. The list of contributors
 can be found at: https://github.com/SimonSapin/cssselect/blob/master/AUTHORS
 The source of the original Python library is released under BSD 3-clause and
 can be found at: https://github.com/SimonSapin/cssselect

Files: src/Symfony/Component/HttpFoundation/Request.php
       src/Symfony/Component/HttpFoundation/Tests/ResponseTest.php
Copyright: 2004-2023 Fabien Potencier
           2005-2010, 2015-2016 Zend Technologies USA Inc.
License: Expat and BSD-3-clause-zend
Comment: Contains code derived from the Zend Framework.
 The Zend Framework is copyright Zend Technologies USA Inc. and released
 under BSD 3-clause.

Files: src/Symfony/Component/Finder/Glob.php
       src/Symfony/Component/Finder/Comparator/NumberComparator.php
Copyright: 2004-2023 Fabien Potencier
           2002 Richard Clamp
License: Expat, and GPL-1+ or Artistic
Comment: Based on the Perl modules Text::Glob and Number::Compare
 The Perl modules Text::Glob and Number::Compare module are copyright Richard
 Clamp and released under the same terms as Perl itself (GPL-1+ or Artistic).

Files: src/Symfony/Component/HttpKernel/HttpCache/*.php
       src/Symfony/Component/HttpKernel/Tests/HttpCache/ResponseCacheStrategyTest.php
Copyright: 2004-2023 Fabien Potencier
           2008 Ryan Tomayko
License: Expat
Comment: Partially based on the Rack-Cache library.
 The Rack-Cache library is copyright Ryan Tomayko and released under the
 MIT (Expat) license.

Files: src/Symfony/Component/Translation/Loader/MoFileLoader.php
Copyright: 2004-2023 Fabien Potencier
           2010 Union of RAD
License: Expat

Files: src/Symfony/Component/Translation/Loader/PoFileLoader.php
Copyright: 2004-2023 Fabien Potencier
           2012 Clemens Tolboom
           2010 Union of RAD
License: Expat

Files: src/Symfony/Bundle/WebProfilerBundle/Resources/fonts/JetBrainsMono.woff2
Copyright: 2020 The JetBrains Mono Project Authors
License: OFL-1.1

Files: src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/base.html.twig
       src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/toolbar_js.html.twig
Copyright: 2004-2023 Fabien Potencier
License: Expat and CC-BY-SA-3.0
Comment: Icons created by SensioLabs are shared under CC-BY-SA-3.0.

Files: src/Symfony/Bridge/Twig/Resources/views/Email/zurb_2/main.css
Copyright: 2017 ZURB, inc.
License: Expat

Files: src/Symfony/Bridge/Twig/Tests/Fixtures/assets/images/logo1.png
       src/Symfony/Bundle/WebProfilerBundle/Resources/views/Icon/symfony.svg
       src/Symfony/Component/ErrorHandler/Resources/assets/images/symfony-logo.svg
       src/Symfony/Component/Filesystem/Tests/Fixtures/web/logo_symfony_header.png
       src/Symfony/Component/Mime/Tests/Fixtures/web/logo_symfony_header.png
Copyright: 2004-2023 Fabien Potencier
License: CC-BY-SA-3.0
Comment: Icons created by SensioLabs are shared under CC-BY-SA-3.0.

Files: debian/licensing/bin/*
Copyright: 2014-2015 Daniel Beyer
License: Expat

License: Artistic
 On Debian GNU/Linux systems, the complete text of the
 Artistic License can be found in '/usr/share/common-licenses/Artistic'.

License: BSD-3-clause-cssselect
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
 met:
 .
 1. Redistributions of source code must retain the above copyright
 notice, this list of conditions and the following disclaimer.
 .
 2. Redistributions in binary form must reproduce the above copyright
 notice, this list of conditions and the following disclaimer in
 the documentation and/or other materials provided with the
 distribution.
 .
 3. Neither the name of Ian Bicking nor the names of its contributors may
 be used to endorse or promote products derived from this software
 without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL IAN BICKING OR
 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
 PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: BSD-3-clause-zend
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 .
   * Redistributions of source code must retain the above copyright
     notice, this list of conditions and the following disclaimer.
 .
   * Redistributions in binary form must reproduce the above copyright
     notice, this list of conditions and the following disclaimer in the
     documentation and/or other materials provided with the distribution.
 .
   * Neither the name of Zend Technologies USA, Inc. nor the names of
     its contributors may be used to endorse or promote products derived
     from this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
 IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
 TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
 PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: CC-BY-SA-3.0
 THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CREATIVE
 COMMONS PUBLIC LICENSE ("CCPL" OR "LICENSE"). THE WORK IS PROTECTED BY
 COPYRIGHT AND/OR OTHER APPLICABLE LAW. ANY USE OF THE WORK OTHER THAN AS
 AUTHORIZED UNDER THIS LICENSE OR COPYRIGHT LAW IS PROHIBITED.
 .
 BY EXERCISING ANY RIGHTS TO THE WORK PROVIDED HERE, YOU ACCEPT AND AGREE
 TO BE BOUND BY THE TERMS OF THIS LICENSE. TO THE EXTENT THIS LICENSE MAY
 BE CONSIDERED TO BE A CONTRACT, THE LICENSOR GRANTS YOU THE RIGHTS
 CONTAINED HERE IN CONSIDERATION OF YOUR ACCEPTANCE OF SUCH TERMS AND
 CONDITIONS.
 .
 1. Definitions
 .
  a. "Adaptation" means a work based upon the Work, or upon the Work and
     other pre-existing works, such as a translation, adaptation,
     derivative work, arrangement of music or other alterations of a
     literary or artistic work, or phonogram or performance and includes
     cinematographic adaptations or any other form in which the Work may be
     recast, transformed, or adapted including in any form recognizably
     derived from the original, except that a work that constitutes a
     Collection will not be considered an Adaptation for the purpose of
     this License. For the avoidance of doubt, where the Work is a musical
     work, performance or phonogram, the synchronization of the Work in
     timed-relation with a moving image ("synching") will be considered an
     Adaptation for the purpose of this License.
  b. "Collection" means a collection of literary or artistic works, such as
     encyclopedias and anthologies, or performances, phonograms or
     broadcasts, or other works or subject matter other than works listed
     in Section 1(f) below, which, by reason of the selection and
     arrangement of their contents, constitute intellectual creations, in
     which the Work is included in its entirety in unmodified form along
     with one or more other contributions, each constituting separate and
     independent works in themselves, which together are assembled into a
     collective whole. A work that constitutes a Collection will not be
     considered an Adaptation (as defined below) for the purposes of this
     License.
  c. "Creative Commons Compatible License" means a license that is listed
     at http://creativecommons.org/compatiblelicenses that has been
     approved by Creative Commons as being essentially equivalent to this
     License, including, at a minimum, because that license: (i) contains
     terms that have the same purpose, meaning and effect as the License
     Elements of this License; and, (ii) explicitly permits the relicensing
     of adaptations of works made available under that license under this
     License or a Creative Commons jurisdiction license with the same
     License Elements as this License.
  d. "Distribute" means to make available to the public the original and
     copies of the Work or Adaptation, as appropriate, through sale or
     other transfer of ownership.
  e. "License Elements" means the following high-level license attributes
     as selected by Licensor and indicated in the title of this License:
     Attribution, ShareAlike.
  f. "Licensor" means the individual, individuals, entity or entities that
     offer(s) the Work under the terms of this License.
  g. "Original Author" means, in the case of a literary or artistic work,
     the individual, individuals, entity or entities who created the Work
     or if no individual or entity can be identified, the publisher; and in
     addition (i) in the case of a performance the actors, singers,
     musicians, dancers, and other persons who act, sing, deliver, declaim,
     play in, interpret or otherwise perform literary or artistic works or
     expressions of folklore; (ii) in the case of a phonogram the producer
     being the person or legal entity who first fixes the sounds of a
     performance or other sounds; and, (iii) in the case of broadcasts, the
     organization that transmits the broadcast.
  h. "Work" means the literary and/or artistic work offered under the terms
     of this License including without limitation any production in the
     literary, scientific and artistic domain, whatever may be the mode or
     form of its expression including digital form, such as a book,
     pamphlet and other writing; a lecture, address, sermon or other work
     of the same nature; a dramatic or dramatico-musical work; a
     choreographic work or entertainment in dumb show; a musical
     composition with or without words; a cinematographic work to which are
     assimilated works expressed by a process analogous to cinematography;
     a work of drawing, painting, architecture, sculpture, engraving or
     lithography; a photographic work to which are assimilated works
     expressed by a process analogous to photography; a work of applied
     art; an illustration, map, plan, sketch or three-dimensional work
     relative to geography, topography, architecture or science; a
     performance; a broadcast; a phonogram; a compilation of data to the
     extent it is protected as a copyrightable work; or a work performed by
     a variety or circus performer to the extent it is not otherwise
     considered a literary or artistic work.
  i. "You" means an individual or entity exercising rights under this
     License who has not previously violated the terms of this License with
     respect to the Work, or who has received express permission from the
     Licensor to exercise rights under this License despite a previous
     violation.
  j. "Publicly Perform" means to perform public recitations of the Work and
     to communicate to the public those public recitations, by any means or
     process, including by wire or wireless means or public digital
     performances; to make available to the public Works in such a way that
     members of the public may access these Works from a place and at a
     place individually chosen by them; to perform the Work to the public
     by any means or process and the communication to the public of the
     performances of the Work, including by public digital performance; to
     broadcast and rebroadcast the Work by any means including signs,
     sounds or images.
  k. "Reproduce" means to make copies of the Work by any means including
     without limitation by sound or visual recordings and the right of
     fixation and reproducing fixations of the Work, including storage of a
     protected performance or phonogram in digital form or other electronic
     medium.
 .
 2. Fair Dealing Rights. Nothing in this License is intended to reduce,
 limit, or restrict any uses free from copyright or rights arising from
 limitations or exceptions that are provided for in connection with the
 copyright protection under copyright law or other applicable laws.
 .
 3. License Grant. Subject to the terms and conditions of this License,
 Licensor hereby grants You a worldwide, royalty-free, non-exclusive,
 perpetual (for the duration of the applicable copyright) license to
 exercise the rights in the Work as stated below:
 .
  a. to Reproduce the Work, to incorporate the Work into one or more
     Collections, and to Reproduce the Work as incorporated in the
     Collections;
  b. to create and Reproduce Adaptations provided that any such Adaptation,
     including any translation in any medium, takes reasonable steps to
     clearly label, demarcate or otherwise identify that changes were made
     to the original Work. For example, a translation could be marked "The
     original work was translated from English to Spanish," or a
     modification could indicate "The original work has been modified.";
  c. to Distribute and Publicly Perform the Work including as incorporated
     in Collections; and,
  d. to Distribute and Publicly Perform Adaptations.
  e. For the avoidance of doubt:
 .
      i. Non-waivable Compulsory License Schemes. In those jurisdictions in
         which the right to collect royalties through any statutory or
         compulsory licensing scheme cannot be waived, the Licensor
         reserves the exclusive right to collect such royalties for any
         exercise by You of the rights granted under this License;
      ii. Waivable Compulsory License Schemes. In those jurisdictions in
          which the right to collect royalties through any statutory or
          compulsory licensing scheme can be waived, the Licensor waives
          the exclusive right to collect such royalties for any exercise by
          You of the rights granted under this License; and,
      iii. Voluntary License Schemes. The Licensor waives the right to
           collect royalties, whether individually or, in the event that
           the Licensor is a member of a collecting society that
           administers voluntary licensing schemes, via that society, from
           any exercise by You of the rights granted under this License.
 .
 The above rights may be exercised in all media and formats whether now
 known or hereafter devised. The above rights include the right to make
 such modifications as are technically necessary to exercise the rights in
 other media and formats. Subject to Section 8(f), all rights not expressly
 granted by Licensor are hereby reserved.
 .
 4. Restrictions. The license granted in Section 3 above is expressly made
 subject to and limited by the following restrictions:
 .
  a. You may Distribute or Publicly Perform the Work only under the terms
     of this License. You must include a copy of, or the Uniform Resource
     Identifier (URI) for, this License with every copy of the Work You
     Distribute or Publicly Perform. You may not offer or impose any terms
     on the Work that restrict the terms of this License or the ability of
     the recipient of the Work to exercise the rights granted to that
     recipient under the terms of the License. You may not sublicense the
     Work. You must keep intact all notices that refer to this License and
     to the disclaimer of warranties with every copy of the Work You
     Distribute or Publicly Perform. When You Distribute or Publicly
     Perform the Work, You may not impose any effective technological
     measures on the Work that restrict the ability of a recipient of the
     Work from You to exercise the rights granted to that recipient under
     the terms of the License. This Section 4(a) applies to the Work as
     incorporated in a Collection, but this does not require the Collection
     apart from the Work itself to be made subject to the terms of this
     License. If You create a Collection, upon notice from any Licensor You
     must, to the extent practicable, remove from the Collection any credit
     as required by Section 4(c), as requested. If You create an
     Adaptation, upon notice from any Licensor You must, to the extent
     practicable, remove from the Adaptation any credit as required by
     Section 4(c), as requested.
  b. You may Distribute or Publicly Perform an Adaptation only under the
     terms of: (i) this License; (ii) a later version of this License with
     the same License Elements as this License; (iii) a Creative Commons
     jurisdiction license (either this or a later license version) that
     contains the same License Elements as this License (e.g.,
     Attribution-ShareAlike 3.0 US)); (iv) a Creative Commons Compatible
     License. If you license the Adaptation under one of the licenses
     mentioned in (iv), you must comply with the terms of that license. If
     you license the Adaptation under the terms of any of the licenses
     mentioned in (i), (ii) or (iii) (the "Applicable License"), you must
     comply with the terms of the Applicable License generally and the
     following provisions: (I) You must include a copy of, or the URI for,
     the Applicable License with every copy of each Adaptation You
     Distribute or Publicly Perform; (II) You may not offer or impose any
     terms on the Adaptation that restrict the terms of the Applicable
     License or the ability of the recipient of the Adaptation to exercise
     the rights granted to that recipient under the terms of the Applicable
     License; (III) You must keep intact all notices that refer to the
     Applicable License and to the disclaimer of warranties with every copy
     of the Work as included in the Adaptation You Distribute or Publicly
     Perform; (IV) when You Distribute or Publicly Perform the Adaptation,
     You may not impose any effective technological measures on the
     Adaptation that restrict the ability of a recipient of the Adaptation
     from You to exercise the rights granted to that recipient under the
     terms of the Applicable License. This Section 4(b) applies to the
     Adaptation as incorporated in a Collection, but this does not require
     the Collection apart from the Adaptation itself to be made subject to
     the terms of the Applicable License.
  c. If You Distribute, or Publicly Perform the Work or any Adaptations or
     Collections, You must, unless a request has been made pursuant to
     Section 4(a), keep intact all copyright notices for the Work and
     provide, reasonable to the medium or means You are utilizing: (i) the
     name of the Original Author (or pseudonym, if applicable) if supplied,
     and/or if the Original Author and/or Licensor designate another party
     or parties (e.g., a sponsor institute, publishing entity, journal) for
     attribution ("Attribution Parties") in Licensor's copyright notice,
     terms of service or by other reasonable means, the name of such party
     or parties; (ii) the title of the Work if supplied; (iii) to the
     extent reasonably practicable, the URI, if any, that Licensor
     specifies to be associated with the Work, unless such URI does not
     refer to the copyright notice or licensing information for the Work;
     and (iv) , consistent with Ssection 3(b), in the case of an
     Adaptation, a credit identifying the use of the Work in the Adaptation
     (e.g., "French translation of the Work by Original Author," or
     "Screenplay based on original Work by Original Author"). The credit
     required by this Section 4(c) may be implemented in any reasonable
     manner; provided, however, that in the case of a Adaptation or
     Collection, at a minimum such credit will appear, if a credit for all
     contributing authors of the Adaptation or Collection appears, then as
     part of these credits and in a manner at least as prominent as the
     credits for the other contributing authors. For the avoidance of
     doubt, You may only use the credit required by this Section for the
     purpose of attribution in the manner set out above and, by exercising
     Your rights under this License, You may not implicitly or explicitly
     assert or imply any connection with, sponsorship or endorsement by the
     Original Author, Licensor and/or Attribution Parties, as appropriate,
     of You or Your use of the Work, without the separate, express prior
     written permission of the Original Author, Licensor and/or Attribution
     Parties.
  d. Except as otherwise agreed in writing by the Licensor or as may be
     otherwise permitted by applicable law, if You Reproduce, Distribute or
     Publicly Perform the Work either by itself or as part of any
     Adaptations or Collections, You must not distort, mutilate, modify or
     take other derogatory action in relation to the Work which would be
     prejudicial to the Original Author's honor or reputation. Licensor
     agrees that in those jurisdictions (e.g. Japan), in which any exercise
     of the right granted in Section 3(b) of this License (the right to
     make Adaptations) would be deemed to be a distortion, mutilation,
     modification or other derogatory action prejudicial to the Original
     Author's honor and reputation, the Licensor will waive or not assert,
     as appropriate, this Section, to the fullest extent permitted by the
     applicable national law, to enable You to reasonably exercise Your
     right under Section 3(b) of this License (right to make Adaptations)
     but not otherwise.
 .
 5. Representations, Warranties and Disclaimer
 .
 UNLESS OTHERWISE MUTUALLY AGREED TO BY THE PARTIES IN WRITING, LICENSOR
 OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY
 KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE,
 INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTIBILITY,
 FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF
 LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS,
 WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION
 OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU.
 .
 6. Limitation on Liability. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE
 LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR
 ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES
 ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS
 BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
 .
 7. Termination
 .
  a. This License and the rights granted hereunder will terminate
     automatically upon any breach by You of the terms of this License.
     Individuals or entities who have received Adaptations or Collections
     from You under this License, however, will not have their licenses
     terminated provided such individuals or entities remain in full
     compliance with those licenses. Sections 1, 2, 5, 6, 7, and 8 will
     survive any termination of this License.
  b. Subject to the above terms and conditions, the license granted here is
     perpetual (for the duration of the applicable copyright in the Work).
     Notwithstanding the above, Licensor reserves the right to release the
     Work under different license terms or to stop distributing the Work at
     any time; provided, however that any such election will not serve to
     withdraw this License (or any other license that has been, or is
     required to be, granted under the terms of this License), and this
     License will continue in full force and effect unless terminated as
     stated above.
 .
 8. Miscellaneous
 .
  a. Each time You Distribute or Publicly Perform the Work or a Collection,
     the Licensor offers to the recipient a license to the Work on the same
     terms and conditions as the license granted to You under this License.
  b. Each time You Distribute or Publicly Perform an Adaptation, Licensor
     offers to the recipient a license to the original Work on the same
     terms and conditions as the license granted to You under this License.
  c. If any provision of this License is invalid or unenforceable under
     applicable law, it shall not affect the validity or enforceability of
     the remainder of the terms of this License, and without further action
     by the parties to this agreement, such provision shall be reformed to
     the minimum extent necessary to make such provision valid and
     enforceable.
  d. No term or provision of this License shall be deemed waived and no
     breach consented to unless such waiver or consent shall be in writing
     and signed by the party to be charged with such waiver or consent.
  e. This License constitutes the entire agreement between the parties with
     respect to the Work licensed here. There are no understandings,
     agreements or representations with respect to the Work not specified
     here. Licensor shall not be bound by any additional provisions that
     may appear in any communication from You. This License may not be
     modified without the mutual written agreement of the Licensor and You.
  f. The rights granted under, and the subject matter referenced, in this
     License were drafted utilizing the terminology of the Berne Convention
     for the Protection of Literary and Artistic Works (as amended on
     September 28, 1979), the Rome Convention of 1961, the WIPO Copyright
     Treaty of 1996, the WIPO Performances and Phonograms Treaty of 1996
     and the Universal Copyright Convention (as revised on July 24, 1971).
     These rights and subject matter take effect in the relevant
     jurisdiction in which the License terms are sought to be enforced
     according to the corresponding provisions of the implementation of
     those treaty provisions in the applicable national law. If the
     standard suite of rights granted under applicable copyright law
     includes additional rights not granted under this License, such
     additional rights are deemed to be included in the License; this
     License is not intended to restrict the license of any rights under
     applicable law.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is furnished
 to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

License: GPL-1+
 On Debian GNU/Linux systems, the complete text of the GNU General
 Public License can be found in '/usr/share/common-licenses/GPL-1'.

License: OFL-1.1
 PREAMBLE
 The goals of the Open Font License (OFL) are to stimulate worldwide
 development of collaborative font projects, to support the font creation
 efforts of academic and linguistic communities, and to provide a free and
 open framework in which fonts may be shared and improved in partnership
 with others.
 .
 The OFL allows the licensed fonts to be used, studied, modified and
 redistributed freely as long as they are not sold by themselves. The
 fonts, including any derivative works, can be bundled, embedded,
 redistributed and/or sold with any software provided that any reserved
 names are not used by derivative works. The fonts and derivatives,
 however, cannot be released under any other type of license. The
 requirement for fonts to remain under this license does not apply
 to any document created using the fonts or their derivatives.
 .
 DEFINITIONS
 "Font Software" refers to the set of files released by the Copyright
 Holder(s) under this license and clearly marked as such. This may
 include source files, build scripts and documentation.
 .
 "Reserved Font Name" refers to any names specified as such after the
 copyright statement(s).
 .
 "Original Version" refers to the collection of Font Software components as
 distributed by the Copyright Holder(s).
 .
 "Modified Version" refers to any derivative made by adding to, deleting,
 or substituting -- in part or in whole -- any of the components of the
 Original Version, by changing formats or by porting the Font Software to a
 new environment.
 .
 "Author" refers to any designer, engineer, programmer, technical
 writer or other person who contributed to the Font Software.
 .
 PERMISSION & CONDITIONS
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of the Font Software, to use, study, copy, merge, embed, modify,
 redistribute, and sell modified and unmodified copies of the Font
 Software, subject to the following conditions:
 .
 1) Neither the Font Software nor any of its individual components,
 in Original or Modified Versions, may be sold by itself.
 .
 2) Original or Modified Versions of the Font Software may be bundled,
 redistributed and/or sold with any software, provided that each copy
 contains the above copyright notice and this license. These can be
 included either as stand-alone text files, human-readable headers or
 in the appropriate machine-readable metadata fields within text or
 binary files as long as those fields can be easily viewed by the user.
 .
 3) No Modified Version of the Font Software may use the Reserved Font
 Name(s) unless explicit written permission is granted by the corresponding
 Copyright Holder. This restriction only applies to the primary font name as
 presented to the users.
 .
 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
 Software shall not be used to promote, endorse or advertise any
 Modified Version, except to acknowledge the contribution(s) of the
 Copyright Holder(s) and the Author(s) or with their explicit written
 permission.
 .
 5) The Font Software, modified or unmodified, in part or in whole,
 must be distributed entirely under this license, and must not be
 distributed under any other license. The requirement for fonts to
 remain under this license does not apply to any document created
 using the Font Software.
 .
 TERMINATION
 This license becomes null and void if any of the above conditions are
 not met.
 .
 DISCLAIMER
 THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
 OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
 COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
 INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
 DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
 OTHER DEALINGS IN THE FONT SOFTWARE.

DFSG Assistant LLM REVIEW 2 blocker, 3 important, 3 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for symfony version 8.2.0~beta1+dfsg-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: No
  • Packaging is of good quality: Yes
  • Issues: 2 blocker, 3 important, 3 minor
  • debian/watch: version 5
  • debian/copyright: machine-readable
  • Scan before the review: 26 found

Licensing

The licences found in the tree are all free (Expat/MIT, BSD-3-clause, OFL-1.1, CC-BY-SA-3.0, Apache-2.0 and MPL-2.0), and no non-free term was found; the "non-commercial" hits are descriptive prose, not licence clauses. debian/copyright is DEP-5, but it is materially incomplete: the OASIS XLIFF and W3C XML schemas carry third-party terms ("All rights reserved") that the file does not mention, the minified Mermaid bundle shipped in php-symfony-web-profiler-bundle contains DOMPurify, js-yaml, lodash and Mermaid code with no stanza and no source in the package, and several holders of embedded code (Facebook, Zend in Contracts, William Durand, the normalize.css/modern-normalize authors) are missing. The Intl/Emoji locale data generated from ICU/CLDR is recorded only as Fabien Potencier's Expat work, and the Debian packaging files are attributed to Fabien Potencier because there is no Files: debian/* stanza.

Packaging

This is mature, well-structured packaging: debhelper compat 14 with dh-sequence-phpcomposer, one binary per component plus bridges, a full Build-Depends-Indep test set, an autopkgtest that runs the suite against the installed packages, DEP-3 patch series, correct Vcs-* fields and Standards-Version 4.7.4 against Policy 4.7.4.1. Only minor defects were found: nine KeyManagement bridge packages describe themselves as integration "for Symfony Lock", and two entries of debian/pkg-php-tools-autoloaders end in a stray quote. No maintainer scripts or other policy problems were found.

Issues

blocker licensing 1. OASIS XLIFF schemas are licensed under nothing recorded here: xliff-core-2.0.xsd says "All rights reserved", and debian/copyright calls them Expat ◂
  • Files: debian/copyright:7-10, src/Symfony/Component/Translation/Resources/schemas/xliff-core-2.0.xsd:5-8, src/Symfony/Component/Translation/Resources/schemas/xliff-core-1.2-transitional.xsd:1-30, src/Symfony/Component/Translation/Resources/schemas/xliff-core-2.2.xsd:4-6, src/Symfony/Component/Translation/Resources/schemas/xml.xsd:1-40
  • Basis: checked, in the package or with a reference tool
  • Evidence: xliff-core-2.0.xsd has Copyright (c) OASIS Open 2014. All rights reserved. and OASIS Standard with no licence grant; xliff-core-1.2-transitional.xsd and xliff-core-2.2.xsd carry no copyright or licence statement at all; xml.xsd (the W3C XML-namespace schema) has none either. debian/copyright's catch-all says Files: * / Copyright: 2004-2023 Fabien Potencier / License: Expat.
  • Problem: The four schema files are third-party works from OASIS and the W3C. They ship in php-symfony-translation (debian/rules installs $src_path/* without excluding Resources/schemas), but the only licence recorded for them is the catch-all Expat/Fabien Potencier stanza, which is wrong. The terms that would allow Debian to redistribute and modify them are nowhere in the package, so Policy 12.5's requirement of a verbatim copy of each distribution licence is unmet and their DFSG status cannot be established from the package.
  • Fix: Add Files stanzas naming OASIS Open and the W3C with the applicable licence terms (the OASIS and W3C licences are not in /usr/share/common-licenses, so reproduce their text). If the OASIS terms do not permit modification, the schemas cannot be shipped in main and must be replaced or dropped.
blocker licensing 2. mermaid-flowchart-v2.min.js bundles Mermaid, DOMPurify, js-yaml and lodash code that debian/copyright does not record, and ships without source ◂
  • Files: src/Symfony/Bundle/WebProfilerBundle/Resources/views/Script/Mermaid/mermaid-flowchart-v2.min.js:418,432-448, src/Symfony/Bundle/WebProfilerBundle/Resources/views/Script/Mermaid/Makefile:4-16, debian/copyright:7-10
  • Basis: checked, in the package or with a reference tool
  • Evidence: The bundle ends with /*! Bundled license information: ... DOMPurify 3.2.6 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 ... js-yaml 4.1.0 ... @license MIT ... Lodash ... Copyright OpenJS Foundation and other contributors ... Released under MIT license, and its embedded package.json has author:"Knut Sveidqvist",license:"MIT" (mermaid). The Makefile only records how to fetch and rebuild it: curl ... mermaid@11.12.0.tar.gz then pnpm ... run build:mermaid and cp repo-$(tag)/packages/tiny/dist/mermaid.tiny.js $@.
  • Problem: This minified file is installed (debian/rules' generic branch installs Resources/views/Script/Mermaid), but debian/copyright has no stanza for it: Files: * applies Expat and Fabien Potencier to it, omitting the Mermaid, Cure53/DOMPurify, js-yaml and OpenJS/lodash copyrights and the Apache-2.0 and MPL-2.0 licences. At the same time the preferred form for modification is not in the package - only a Makefile that downloads it - so DFSG 2 (source) is not satisfied either.
  • Fix: Add a Files stanza for the file naming Knut Sveidqvist (MIT), Cure53 (Apache-2.0 and MPL-2.0), the js-yaml authors (MIT) and the OpenJS Foundation (MIT), pointing at /usr/share/common-licenses/Apache-2.0 and MPL-2.0; and ship the Mermaid sources the file was built from (or drop/replace the bundle).
important licensing 3. Files: * does not name Facebook, Inc., Zend Technologies in Contracts, William Durand, Sindre Sorhus, Nicolas Gallagher or Jonathan Neal ◂
  • Files: debian/copyright:7-10, debian/copyright:23-27, src/Symfony/Component/String/ByteString.php:41-43, src/Symfony/Contracts/Translation/TranslatorTrait.php:135-137, src/Symfony/Component/HttpFoundation/JsonResponse.php:81-83, src/Symfony/Component/ErrorHandler/Resources/assets/css/exception.css:107, src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/profiler.css.twig:3-4
  • Basis: checked, in the package or with a reference tool
  • Evidence: Copyright (c) 2004-2020, Facebook, Inc. (ByteString.php, Hack Standard Library, MIT); Copyright (c) 2005-2010 Zend Technologies USA Inc. (Contracts/Translation/TranslatorTrait.php, new BSD); partially taken from https://github.com/willdurand/JsonpCallbackValidator ... (c) William Durand (JsonResponse.php); modern-normalize v3.0.1 | MIT License | https://github.com/sindresorhus/modern-normalize (exception.css); normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css (profiler.css.twig).
  • Problem: The catch-all stanza names only Fabien Potencier and Paweł Kuna, so all these embedded third-party notices are mis-attributed. The Zend stanza lists only HttpFoundation/Request.php and Tests/ResponseTest.php and does not cover the equivalent Zend-derived code that moved to Contracts/Translation/TranslatorTrait.php. MIT and BSD require the copyright notices to be reproduced, so the copyright file is inaccurate and incomplete for shipped code.
  • Fix: Add the holders to the appropriate stanzas (extend the Zend stanza to src/Symfony/Contracts/Translation/TranslatorTrait.php; add stanzas or holders for Facebook, Inc., William Durand, Sindre Sorhus, and Nicolas Gallagher and Jonathan Neal).
important licensing 4. Intl and Emoji data generated from ICU and CLDR is recorded only as Fabien Potencier's Expat work ◂
  • Files: debian/copyright:7-10, src/Symfony/Component/Intl/Resources/data/git-info.txt:4, src/Symfony/Component/Intl/Resources/bin/update-data.php:75, src/Symfony/Component/Emoji/Resources/bin/Makefile:9,14, src/Symfony/Component/Emoji/Resources/bin/README.md:14
  • Basis: inferred from what was read, not seen directly
  • Evidence: Intl/Resources/data/git-info.txt: URL: https://github.com/unicode-org/icu.git / Revision: ddc6b669...; Emoji/Resources/bin/Makefile fetches https://unicode.org/Public/emoji/latest/emoji-test.txt and the README says to update unicode-org/cldr. debian/copyright's Files: * gives them Copyright: 2004-2023 Fabien Potencier and License: Expat.
  • Problem: The thousands of files in Intl/Resources/data and Emoji/Resources/data are derived from ICU and CLDR, which are under the Unicode licence, not Expat. That licence requires its copyright and permission notice to accompany copies of the data, and it is not in /usr/share/common-licenses; the copyright file mentions neither Unicode, Inc. nor the licence.
  • Fix: Add a stanza for the generated data with Copyright: 1991-... Unicode, Inc. and the Unicode licence text (as shipped by ICU/CLDR), and state there that the files are generated from ICU/CLDR.
important licensing 5. There is no Files: debian/* stanza, so debian/rules, control, changelog, patches and the image checksum file are attributed to Fabien Potencier ◂
  • Files: debian/copyright:7-10, debian/copyright:84-86
  • Basis: checked, in the package or with a reference tool
  • Evidence: The only Debian stanza is Files: debian/licensing/bin/* / Copyright: 2014-2015 Daniel Beyer / License: Expat; everything else under debian/ falls through to Files: * / Copyright: 2004-2023 Fabien Potencier.
  • Problem: debian/rules, debian/control, debian/changelog, debian/patches/*, debian/clean, the .install/.links files and debian/licensing/image-checksums.dcf are David Prévot's and Daniel Beyer's work; the catch-all stanza claims Fabien Potencier holds their copyright and their licence is not stated. Policy 12.5 requires a verbatim copy of the distribution licence(s), and this makes the per-file information wrong.
  • Fix: Add a Files: debian/* stanza with the packaging copyright holders (Daniel Beyer, David Prévot) and License: Expat, folding debian/licensing/bin/* into it or keeping it as an override.
minor licensing 6. The Finder stanza's License expression Expat, and GPL-1+ or Artistic has a comma that the licence-expression syntax does not allow ◂
  • Files: debian/copyright:36
  • Basis: inferred from what was read, not seen directly
  • Evidence: License: Expat, and GPL-1+ or Artistic
  • Problem: In the License field, licences are combined only with and, or and parentheses (copyright-format 6.7 and the short-name rules in 7.1); a comma is not part of that grammar, so the value is not parseable as an expression and tools see the short name Expat,.
  • Fix: Write License: Expat and (GPL-1+ or Artistic).
minor packaging 7. Nine key-management bridge packages describe themselves as integration "for Symfony Lock" ◂
  • Files: debian/control:1141, debian/control:1154, debian/control:1167, debian/control:1180, debian/control:1193, debian/control:1206, debian/control:1219, debian/control:1232, debian/control:1245
  • Basis: checked, in the package or with a reference tool
  • Evidence: The ${phpcomposer:description} provides AWS integration for Symfony Lock. (and the Azure Key Vault, Doctrine DBAL, Doctrine ORM, Flysystem, Google Cloud, HashiCorp Vault, KMIP and Scaleway variants). The corresponding source, src/Symfony/Component/KeyManagement/Bridge/AwsKms/composer.json, is "name": "symfony/aws-key-management", "description": "Symfony AWS Key Management Bridge".
  • Problem: These packages install src/Symfony/Component/KeyManagement/Bridge/*, not Lock; the copy-pasted description names the wrong component, which apt shows to users.
  • Fix: Replace for Symfony Lock with for Symfony KeyManagement in those nine descriptions.
minor packaging 8. Two entries of debian/pkg-php-tools-autoloaders end in a stray quote ◂
  • Files: debian/pkg-php-tools-autoloaders:128-129
  • Basis: inferred from what was read, not seen directly
  • Evidence: symfony\t\tprelude-notifier\t\tSymfony/Component/Notifier/Bridge/Prelude/autoload.php'; and the same for primotexto-notifier
  • Problem: The trailing ' becomes part of the third field, so a consumer of this file (dh_phpcomposer reads debian/pkg-php-tools-autoloaders) registers the autoload path .../autoload.php';, which does not exist for the Prelude and Primotexto notifier bridges.
  • Fix: Delete the two trailing quotes.
Verified ◂
  • All of debian/ was read: control, rules, changelog, copyright, source/format, install and the per-package .install/.links files, docs, clean, tests/control and tests/phpunit, patches/series (41 patches plus the commented DEP-8 patch), gbp.conf, README.source, upstream/metadata, pkg-php-tools-autoloaders, pkg-php-tools-overrides, the lintian overrides and debian/licensing/*. There are no maintainer scripts and no *.maintscript files.
  • The top-level LICENSE and every per-component and per-bridge LICENSE file are the same Expat text with Copyright (c) 2004-present Fabien Potencier; debian/copyright's Expat text matches it.
  • Built gettext catalogues: src/Symfony/Component/Translation/Tests/Fixtures/empty-translation.mo, src/Symfony/Component/Translation/Tests/Fixtures/plurals.mo and src/Symfony/Component/Translation/Tests/Fixtures/resources.mo are compiled from empty-translation.po, plurals.po and resources.po in the same directory.
  • Archives, all test input data: src/Symfony/Component/HttpFoundation/Tests/File/Fixtures/case-sensitive-mime-type.xlsm (MIME detection), src/Symfony/Component/Mime/Tests/Fixtures/test.docx (MIME parsing) and src/Symfony/Component/Translation/Bridge/Lokalise/Tests/Fixtures/Symfony-locale.zip (Lokalise provider fixture); nothing is generated from them during the build.
  • ICU resource bundles under Intl: src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/en.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/alias.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/mo.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/ro.res, src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/ro_MD.res and src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/res/root.res are genrb output rebuilt by src/Symfony/Component/Intl/Tests/Data/Bundle/Reader/Fixtures/build.sh from the txt/*.txt files beside them; the Writer fixtures src/Symfony/Component/Intl/Tests/Data/Bundle/Writer/Fixtures/en.res and rb.res have en.txt and rb.txt beside them.
  • Translation ResourceBundle fixtures: src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/dat/en.res, src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/dat/fr.res, src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/dat/resources.dat and src/Symfony/Component/Translation/Tests/Fixtures/resourcebundle/res/en.res are compiled bundles whose input en.txt, fr.txt and packagelist.txt are in the dat/ directory.
  • src/Symfony/Bridge/PhpUnit/Tests/DeprecationErrorHandler/deprecation.phar is built by generate_phar.php in that directory from the deprecation/ directory, so its source is present.
  • src/Symfony/Component/Config/Tests/Fixtures/some.phar is a test fixture for GlobResourceTest.php; it is a phar (a container of plain PHP, not compiled code) holding a stub, ProjectWithXsdExtensionInPhar.php and schema/project-1.0.xsd, used to exercise phar:// globbing.
  • src/Symfony/Component/Security/Core/Tests/Authentication/Token/Fixtures/switch-user-token-4.4.txt is a serialized session-token fixture for the 4.4 BC test, not a programme or a licence-bearing work.
  • The scan's four "commercial use" hits are not licence terms: src/Symfony/Bundle/WebProfilerBundle/Resources/fonts/LICENSE.txt is the JetBrains Mono statement that the OFL-1.1 font can be used for commercial and non-commercial purposes, and the lines in src/Symfony/Component/Notifier/Bridge/Isendpro/README.md, src/Symfony/Component/Notifier/Bridge/OvhCloud/README.md and src/Symfony/Component/Notifier/Bridge/OvhCloud/CHANGELOG.md describe an SMS "STOP clause" option.
  • The scan's unmatched holders are string literals, not copyright holders: "Tom & Jerry © 2026" is a test string in src/Symfony/Component/Translation/Tests/HtmlTranslatorTest.php:69, and 'Copyright 1999' and '([0-9]+)' are a replace() input and regex in src/Symfony/Component/String/Tests/AbstractAsciiTestCase.php:1105-1107. The Facebook, Inc. match is real and is reported.
  • The minified file src/Symfony/Bundle/WebProfilerBundle/Resources/views/Script/Mermaid/mermaid-flowchart-v2.min.js is reported as an issue; it is the only .min.js in the tree.
  • src/Symfony/Component/Console/Resources/bin/hiddeninput.exe named in Files-Excluded is absent, matching README.source's explanation that it was removed for unclear licensing.
  • Image licensing is enforced at build time: debian/rules runs debian/licensing/bin/check_image_licenses --check, which requires every png/gif/svg in src (including embedded base64/svg data) to be registered in debian/licensing/image-checksums.dcf and to resolve to the same licence in debian/copyright; the dcf entries and the Files stanzas for the logos and Tabler icons are consistent.
  • The third-party code that debian/copyright does cover was checked against its notices: CssSelector (BSD-3-clause-cssselect), HttpFoundation/Request.php and Tests/ResponseTest.php (BSD-3-clause-zend), Finder/Glob.php and Comparator/NumberComparator.php (Richard Clamp, GPL-1+/Artistic), HttpCache (Rack-Cache, Expat), Mo/PoFileLoader (Union of RAD, Clemens Tolboom), zurb_2/main.css (ZURB), JetBrainsMono.woff2 (OFL-1.1) and the SensioLabs/Symfony logos (CC-BY-SA-3.0); all license texts needed are present in full or point to /usr/share/common-licenses.
  • debian/control's 200+ binaries all are Architecture: all; Build-Depends/Indep packages checked in the archive exist (pkg-php-tools provides dh-sequence-phpcomposer; fonts-jetbrains-mono-web, php-symfony-polyfill-php85, php-tempest-highlight and php-pda-pheanstalk are present).
  • debhelper compat 14: the debhelper tool confirms that from compat 13 dh skips override_dh_auto_test under DEB_BUILD_OPTIONS=nocheck, so the test override in debian/rules needs no nocheck test of its own; ${phpcomposer:*} and ${misc:Depends} are added by dh_gencontrol at compat 14.
  • The three patches read in full (Add-more-tests-to-group-tty, Use-installed-files-for-CI, Assume-php-async-aws-sqs-2) carry DEP-3 From/Date/Subject headers with Forwarded fields; the series is complete and the DEP-8 patch is intentionally commented out and applied by debian/tests/phpunit.
  • debian/tests/control is a valid autopkgtest control: Tests: phpunit, Restrictions: allow-stderr, rw-build-tree, and the trailing @ pulls in the source's binary packages; the script applies and reverses debian/DEP-8/Tests-against-installed-classes.patch with patch (listed in Depends).
  • Standards-Version 4.7.4 against Policy 4.7.4.1: the first two components match, so it is current; Vcs-Browser/Vcs-Git point at the pkg-php-pear salsa repository, and upstream/metadata records Repository, Bug-* and Security-Contact.
  • debian/changelog's top entry (8.2.0~beta1+dfsg-1, experimental) matches the .dsc version; the new binary packages it announces exist in debian/control.
  • No non-free wording was found beyond the reported schema notices: searches for All rights reserved, public domain, no-modification and non-commercial clauses found nothing else in src/.
  • uscan found the packaged version as the newest upstream release (upstream 8.2.0~beta1, packaged 8.2.0~beta1+dfsg).
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Artistic, GPL-1).
Not confirmed ◂
  • The contents of src/Symfony/Component/Config/Tests/Fixtures/some.phar could not be inspected (binary); its role was judged from GlobResourceTest.php and from the phar being a container of PHP.
  • The OASIS and W3C licence texts that apply to the XLIFF and xml schemas are not in the package and were not read; only the fact that the package records no licence for them was checked.
  • Whether dh_phpcomposer actually installs or consumes debian/pkg-php-tools-autoloaders, and so whether the stray quotes break an installed autoloader, could not be checked: pkg-php-tools is not installed on the reviewing system.
  • That the Intl/Emoji data files fall under the Unicode licence rather than Symfony's Expat is inferred from their generation from unicode-org/icu and unicode-org/cldr; the Unicode licence itself is not shipped with the package.
Proposed changes ◂

None.

Uploader's response to the LLM review

Waiting for the uploader's response until , because the review found serious issues.

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
8.1.0+dfsg-1 de6a2e2b… 2026-06-29 08:34 2026-06-29 08:40 mechtilde accepted VIEW

Back to Dashboard | View all reviews for this package