DFSG NEW Queue

DFSG, Licensing & New Packages Team

tdbcsqlite3 1.1.15-2

Package Information

DescriptionTcl Database Connectivity

Tdbc is an interface standard for SQL databases and connectivity that aims to make it easy to write portable and secure Tcl scripts that access SQL databases. This package provides the driver for the sqlite DBMS.

MaintainerMassimo Manghi <mxmanghi@apache.org>
Changed ByMassimo Manghi <mxmanghi@apache.org>
Sponsorsgolovan@debian.org
Distributionunstable
Architectureall
Popcon Installs31
Binary NEWYes (new binary packages of a source already in sid)
Trackerhttps://tracker.debian.org/pkg/tdbcsqlite3
Uploaded1 hour ago

New Package Report

.changes◂
Version1.1.15-2
Changed-ByMassimo Manghi <mxmanghi@apache.org>
Architecturesource all
Distributionunstable
DateMon, 09 Nov 2026 18:42:58 +0100
Sourcetdbcsqlite3
Changelog◂
tdbcsqlite3 (1.1.15-2) unstable; urgency=medium
 .
   * Now supporting also Tcl 9.1, thus supporting naming scheme adopted
     already for the other drivers of the TDBC suite
   * Since the package codebase is entirely independent from the Tcl
     version (library/tdbcsqlite3.tcl) we install it as Tcl file and
     make the Tcl version dependent modules (.tm) links to that file
   * Fix project homepage in debian/control
.dsc◂
Sectionlibs
Priorityoptional
Componentmain
Package-Listtcl-tdbc-sqlite3 deb libs optional arch=all
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: tdbcsqlite3
Source: http://sf.net/tcl/
Upstream-Contact: tcl-tdbc@lists.sourceforge.net
Copyright: 2008, Kevin B. Kenny
License: Tcl

Files: *
Copyright: 2008, Kevin B. Kenny
License: Tcl

Files: Makefile.in
Copyright: 2002-2005, ActiveState Corporation
 1999, Scriptics Corporation
License: Tcl

Files: configure
Copyright: 1992-1996, 1998-2017, 2020-2026, Free Software Foundation
License: FSFUL

Files: tclconfig/tcl.m4
Copyright: 1999-2000, Ajuba Solutions.
 2002-2005 ActiveState Corporation.
License: Tcl

Files: tclconfig/install-sh
Copyright: 1994, X Consortium
License: X11

Files: tests/*
Copyright: 1998-2000, Scriptics Corporation.
License: Tcl

Files: tests/tdbcsqlite3.test
Copyright: 2008, Kevin B. Kenny
License: Tcl

Files: win/nmakehlp.c
Copyright: 2006, Pat Thoyts
 2002, David Gravereaux
License: Tcl

Files: win/makefile.vc
 win/rules.vc
 win/rules-ext.vc
 win/targets.vc
Copyright: 2017, Ashok P. Nadkarni
 2003-2008, Patrick Thoyts
 2001-2003, David Gravereaux
License: Tcl

License: Tcl
 The authors hereby grant permission to use, copy, modify, distribute,
 and license this software and its documentation for any purpose, provided
 that existing copyright notices are retained in all copies and that this
 notice is included verbatim in any distributions. No written agreement,
 license, or royalty fee is required for any of the authorized uses.
 Modifications to this software may be copyrighted by their authors
 and need not follow the licensing terms described here, provided that
 the new terms are clearly indicated on the first page of each file where
 they apply.
 .
 IN NO EVENT SHALL THE AUTHORS OR DISTRIBUTORS BE LIABLE TO ANY PARTY
 FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES
 ARISING OUT OF THE USE OF THIS SOFTWARE, ITS DOCUMENTATION, OR ANY
 DERIVATIVES THEREOF, EVEN IF THE AUTHORS HAVE BEEN ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.
 .
 THE AUTHORS AND DISTRIBUTORS SPECIFICALLY DISCLAIM ANY WARRANTIES,
 INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.  THIS SOFTWARE
 IS PROVIDED ON AN "AS IS" BASIS, AND THE AUTHORS AND DISTRIBUTORS HAVE
 NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR
 MODIFICATIONS.
 .
 GOVERNMENT USE: If you are acquiring this software on behalf of the
 U.S. government, the Government shall have only "Restricted Rights"
 in the software and related documentation as defined in the Federal 
 Acquisition Regulations (FARs) in Clause 52.227.19 (c) (2).  If you
 are acquiring the software on behalf of the Department of Defense, the
 software shall be classified as "Commercial Computer Software" and the
 Government shall have only "Restricted Rights" as defined in Clause
 252.227-7013 (c) (1) of DFARs.  Notwithstanding the foregoing, the
 authors grant the U.S. Government and others acting in its behalf
 permission to use and distribute the software in accordance with the
 terms specified in this license. 

License: X11
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to
 deal in the Software without restriction, including without limitation the
 rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
 sell copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .   
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
 X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
 AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC-
 TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 .
 Except as contained in this notice, the name of the X Consortium shall not
 be used in advertising or otherwise to promote the sale, use or other deal-
 ings in this Software without prior written authorization from the X Consor-
 tium.
 .
 FSF changes to this file are in the public domain.

License: FSFUL
 This configure script is free software; the Free Software Foundation
 gives unlimited permission to copy, distribute and modify it.

DFSG Assistant LLM REVIEW 0 blocker, 1 important, 3 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 0 hours ago.

Proposes a replacement debian/watch: debian/watch in version 5 format

Report◂

DFSG NEW review for tdbcsqlite3 version 1.1.15-2

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: Yes
  • Packaging is of good quality: No
  • Issues: 0 blocker, 1 important, 3 minor
  • debian/watch: old format (version 4)
  • debian/copyright: machine-readable
  • Scan before the review: nothing found

Licensing

The licence terms are DFSG-free: the Tcl licence (license.terms), the X11/MIT text of tclconfig/install-sh and the FSF unlimited-permission licence of the autoconf-generated configure, all reproduced verbatim in debian/copyright. Every copyright holder found in the tree is named in a stanza that matches its file, and the scan's author check confirms it. The one gap is minor and not a Policy 2.3 requirement: there is no Files: debian/* stanza, so the catch-all Files: * credits the upstream author with the Debian packaging.

Packaging

The packaging is otherwise in good order (compat 13 sequencer, DEP-3 patch, source format 3.0 (quilt), current Standards-Version, clean rename of the binary with Conflicts/Replaces/Provides), but there are two real defects. The -2 patch moves install-tm's targets into $(pkgdir) without creating it, so make install run by override_dh_auto_install fails. And the binary Depends on libsqlite3-tcl (>= 3.54.1-2), a version that neither unstable nor experimental has, while the driver itself only needs sqlite3 3.51 and falls back for older ones.

Issues

important packaging 1. Depends on libsqlite3-tcl (>= 3.54.1-2), a version no archive list has ◂
  • Files: debian/control:11, library/tdbcsqlite3.tcl:565
  • Basis: checked, in the package or with a reference tool
  • Evidence: debian/control: Depends: ${shlibs:Depends}, ${misc:Depends}, tcl-tdbc (>=1.1.13~), libsqlite3-tcl (>= 3.54.1-2); apt-cache show libsqlite3-tcl -> Version: 3.53.4-2 (the only version in the unstable and experimental lists); library/tdbcsqlite3.tcl:565: if {[package vsatisfies [package present sqlite3] 3.51-]} {
  • Problem: No version in the archive satisfies the constraint, so tcl-tdbc-sqlite3 cannot be installed: apt reports the dependency as unsatisfiable and the package stays unconfigured. The bound is also much tighter than the code requires: the driver's newest need is the -asdict option from sqlite3 3.51 (commented at library/tdbcsqlite3.tcl:15) and it falls back to an array for older bindings, so 3.53.4-2 would run it. Nothing in the changelog explains the bound (the 1.1.15-2 entry mentions only Tcl 9.1 support and the homepage), and depending on a specific Debian revision of another package is only justified by a fix in that revision. If the bound is meant to pull in a newer libsqlite3-tcl built for Tcl 9.1, the package is still uninstallable until that upload reaches unstable.
  • Fix: Lower the bound to what the code needs, e.g. libsqlite3-tcl (>= 3.51), or drop the version entirely; if a newer sqlite3 really is required (for example for Tcl 9.1 support), wait until that version is in unstable before uploading this package and say in the changelog why the bound exists.
minor licensing 2. No Files: debian/* stanza, so Files: * credits Kevin B. Kenny for the Debian packaging ◂
  • Files: debian/copyright:8-11
  • Basis: checked, in the package or with a reference tool
  • Evidence: Files: * / Copyright: 2008, Kevin B. Kenny is the only stanza matching debian/rules, debian/control or debian/patches/*; there is no Files: debian/* stanza anywhere in the file.
  • Problem: The catch-all attributes the copyright of the Debian packaging (written by the maintainer, Massimo Manghi) to the upstream author and states no licence for it, which is inaccurate for debian/rules, debian/control, debian/clean, debian/docs and the patch. Policy 2.3 does not require it here: those files are not compiled into anything the binary ships, and debian/copyright and debian/changelog, which are installed, go in as plain text; it is a completeness problem for a machine-readable copyright file, not a Policy violation.
  • Fix: Add a Files: debian/* stanza after the upstream stanzas with Copyright: 2026, Massimo Manghi <mxmanghi@apache.org> and a License: field plus stand-alone paragraph for the licence the packaging is under (e.g. the Tcl licence used for the rest of the package, or Expat).
minor packaging 3. Patched install-tm installs into $(pkgdir), which nothing creates, so make install fails ◂
  • Files: Makefile.in:184-186, Makefile.in:473-477, debian/patches/modify-install-target.patch
  • Basis: checked, in the package or with a reference tool
  • Evidence: pkgdir = $(libdir)/tdbcsqlite3 / pkgfile = $(pkgdir)/tdbcsqlite3.tcl / uuidfile = $(pkgdir)/tdbcsqlite3/manifest.uuid, and install-tm: @$(INSTALL_DATA_DIR) $(DESTDIR)$(pkgtmdir) then $(INSTALL_DATA) $(srcdir)/library/tdbcsqlite3.tcl $(DESTDIR)$(pkgfile); tclconfig/tcl.m4:4051: INSTALL_DATA_DIR='${INSTALL} -d -m 755'
  • Problem: install-tm creates only $(DESTDIR)$(pkgtmdir) (= $(libdir)/tcl8.6//tdbc); install -d creates just the named directory, and nothing anywhere in Makefile.in runs INSTALL_DATA_DIR on $(pkgdir). override_dh_auto_install calls dh_auto_install for 8.6 and 9.1, which runs make install with DESTDIR set to the absolute debian/tcl-tdbc-sqlite3 (compat 13, one binary package), so the first INSTALL_DATA line becomes install -c -m 644 library/tdbcsqlite3.tcl .../usr/share/tcltk/tdbcsqlite3/tdbcsqlite3.tcl and dies with 'No such file or directory'. Upstream's install-tm installed both files into $(pkgtmdir), which it does create; the patch redirected them without adding the mkdir. A second, independent directory is missing too: $(uuidfile) is $(pkgdir)/tdbcsqlite3/manifest.uuid, one level deeper than anything created, while the symlink two lines below points at ../../../tdbcsqlite3/manifest.uuid = $(pkgdir)/manifest.uuid, so the .uuid link would dangle even after the mkdir is added.
  • Fix: Add @$(INSTALL_DATA_DIR) $(DESTDIR)$(pkgdir) to install-tm and change uuidfile to $(pkgdir)/manifest.uuid so that the installed file and the .uuid symlink agree; then build the package to confirm both dh_auto_install runs succeed.
minor packaging 4. debian/watch is in the old version 4 format ◂
  • Files: debian/watch
  • Basis: found by the review tooling's own checks
  • Evidence: version=4
  • Problem: Version 5 is the current format of debian/watch.
  • Fix: Convert it to version 5; a mechanical conversion is under Proposed changes.
Verified ◂
  • Read every file of the package (21 files plus debian/: changelog, clean, control, copyright, docs, rules, patches/series and the patch, source/format); .pc/ and debian/cargo-checksum.json are absent/ignored. The scan before the review listed no built files, minified code, PDFs or non-free wording, and its author check reported every holder named, which I confirmed against the file notices.
  • debian/copyright is DEP-5 with the exact current Format URL. Its stanzas match the notices in the tree: License: Tcl text is verbatim from license.terms (minus the Scriptics preamble); Makefile.in carries Scriptics 1999 and ActiveState 2002-2005; tclconfig/tcl.m4 carries Ajuba 1999-2000 and ActiveState 2002-2005; tclconfig/install-sh carries the 1994 X Consortium text with the FSF public-domain sentence, reproduced as License: X11; configure carries 'Copyright (C) 1992-1996, 1998-2017, 2020-2026 Free Software Foundation' and the unlimited-permission paragraph, reproduced as License: FSFUL; tests/all.tcl carries Scriptics 1998-2000 (tests/* stanza) and tests/tdbcsqlite3.test, library/tdbcsqlite3.tcl and doc/tdbc_sqlite3.n carry Kevin B. Kenny 2008, covered by the later tests/* and Files: * stanzas; win/nmakehlp.c carries David Gravereaux 2002 and Pat Thoyts 2006, and win/makefile.vc, rules.vc, rules-ext.vc and targets.vc carry Gravereaux 2001-2003, Thoyts 2003-2008 and Nadkarni 2017, matching the win/*.vc stanza.
  • A whole-tree grep for Copyright/(C)/©/SPDX/Licensed under/GNU/Apache/MPL/public domain/All rights reserved/non-commercial found nothing beyond the notices above: no field-of-use, no-commercial or no-modification terms anywhere, so the licences combined in the binary (Tcl) are compatible and free.
  • No generated-without-source files: configure comes from configure.ac and aclocal.m4 from tclconfig/tcl.m4, both present. The tree holds no compiled binary, archive, font, image, minified code or PDF.
  • The win/ files (nmakehlp.c, makefile.vc, rules.vc, rules-ext.vc, targets.vc) are Windows-build material only and take no part in the Debian build (debian/rules overrides configure/install and never invokes nmake); their notices are nevertheless all named in debian/copyright.
  • Packaging otherwise: debhelper-compat 13 with the dh sequencer, source format 3.0 (quilt), Rules-Requires-Root: binary-targets, no maintainer scripts, no debian/tests (autopkgtest). The single patch has a DEP-3 header (Description, Author, Forwarded: not-needed, Last-Update 2026-11-11). Standards-Version 4.7.4 against Policy 4.7.4.1 is current.
  • Checked with debhelper 14.5 that at compat 13 with one binary package dh_auto_install's default destdir is debian/ (File::Spec->rel2abs of it), which is what debian/rules' DIR and the man-page mkdir assume; debian/tmp and dh_install play no part here, so the absence of .install files is not a fault. dh_auto_build and dh_auto_test are no-ops (dh_auto_build's 'PROMISE: DH NOOP WITHOUT buildsystem(build)' and no Makefile in the source directory), so tests/all.tcl is run neither during the build nor by an autopkgtest.
  • The binary rename is coherent: tcl8.6-tdbc-sqlite3 (<< 1.1.15-2) is conflicted with and replaced, both tcl8.6 and tcl9.1 names are provided, and tcl9.1-dev and tcl-tdbc (1.1.15-1) exist in the archive with versions satisfying Build-Depends.
  • uscan found the packaged version as the newest upstream release (upstream 1.1.15, packaged 1.1.15).
Not confirmed ◂
  • Whether an sqlite3 upload providing libsqlite3-tcl 3.54.1-2 is waiting in the NEW queue: apt-cache can only see package names there, not versions, so the Depends issue above may be a timing matter rather than a wrong bound.
  • The build failure was not reproduced (no build is possible here); it is deduced from install-tm, TEA's INSTALL_DATA_DIR definition and dh_auto_install's compat-13 destdir, not from running dpkg-buildpackage.
Proposed: debian/watch in version 5 format ◂

debian/watch is in an old format. This is the conversion made by uscan --update-watchfile, which has not been run against the upstream site: some defaults differ in version 5, so test it with uscan --report before use.

Version: 5

Source: http://sf.net/tcl/
Matching-Pattern: tdbcsqlite3-([\d.]+)\.tar\.gz

Uploader's response to the LLM review

The uploader was emailed about the review 0 hours ago.

Back to Dashboard | View all reviews for this package