Dear William, I need to clarify the version-specific requirement that led to this ITP filing.
VERSION DEPENDENCY ISSUE: FOSSology requires php-psr-http-factory version 1.0.1, while current Debian may provide version 1.1.x or 2.x. This is part of a broader dependency chain compatibility issue with FOSSology's Slim 3.x and Symfony 3.4.x components. DEPENDENCY CHAIN COMPATIBILITY: The core issue is maintaining compatibility across FOSSology's HTTP stack: - FOSSology uses Slim Framework 3.12.3 - Slim 3.x requires specific PSR-HTTP-Factory 1.0.x interfaces - FOSSology's HTTP handling components expect PSR-17 1.0.x behavior - Newer PSR-HTTP-Factory versions may have interface changes incompatible with Slim 3.x TECHNICAL INTEGRATION REQUIREMENTS: FOSSology's web components rely on: - Specific PSR-17 factory interface implementations from 1.0.1 - HTTP message creation patterns compatible with Slim 3.x - Integration with FOSSology's existing HTTP handling code - Compatibility with FOSSology's PSR-7 message processing EVIDENCE FROM INTEGRATION TESTING: FOSSology's composer.json specifically locks PSR-HTTP-Factory to 1.0.1 because newer versions cause integration issues with its legacy Slim 3.x and Symfony 3.4.x dependency chain. REAL-WORLD DEPENDENCY CONFLICTS: When attempting to use newer PSR-HTTP-Factory versions with FOSSology: - Slim 3.x factory usage patterns break - HTTP message creation interfaces don't match expected signatures - FOSSology's web routing and API components fail to initialize properly PROPOSED SOLUTION: Package as php-psr-http-factory-1.0 to provide the specific version FOSSology's dependency chain requires, alongside current Debian versions. JUSTIFICATION: This maintains the entire FOSSology HTTP stack integrity - Slim 3.x + PSR-HTTP-Factory 1.0.x + FOSSology's web components - without forcing major architectural changes upstream. PRECEDENT: Following Debian's approach for version-specific packages when applications have tightly coupled dependency requirements that cannot be easily updated independently. REQUEST: Could we reopen this ITP to discuss providing PSR-HTTP-Factory 1.0.1 for FOSSology's dependency chain compatibility? Best regards, Ahmed Gamal FOSSology Debian Packaging Team Technical reference: https://www.php-fig.org/psr/psr-17/ On Sun, Aug 10, 2025 at 2:03 PM Debian Bug Tracking System < [email protected]> wrote: > Your message dated Sun, 10 Aug 2025 15:45:06 +0200 > with message-id <[email protected]> > and subject line The package already exists in Debian > has caused the Debian Bug report #1109624, > regarding ITP: php-psr-http-factory -- Common interfaces for PSR-7 HTTP > message factories > to be marked as done. > > This means that you claim that the problem has been dealt with. > If this is not the case it is now your responsibility to reopen the > Bug report if necessary, and/or fix the problem forthwith. > > (NB: If you are a system administrator and have no idea what this > message is talking about, this may indicate a serious mail system > misconfiguration somewhere. Please contact [email protected] > immediately.) > > > -- > 1109624: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109624 > Debian Bug Tracking System > Contact [email protected] with problems > > > > ---------- Forwarded message ---------- > From: Ahmed Gamal <[email protected]> > To: Debian Bug Tracking System <[email protected]> > Cc: > Bcc: > Date: Mon, 21 Jul 2025 04:37:45 +0000 > Subject: ITP: php-psr-http-factory -- Common interfaces for PSR-7 HTTP > message factories > Package: wnpp > Severity: wishlist > Owner: Ahmed Gamal <[email protected]> > > * Package name : php-psr-http-factory > Version : 1.0.1 > Upstream Author : PHP-FIG <http://www.php-fig.org/> > * URL : https://github.com/php-fig/http-factory > * License : MIT > Programming Lang: PHP > Section : php > > Description: > Common interfaces for PSR-7 HTTP message factories > > This package provides common interfaces for PSR-7 HTTP message factories > as > defined by PSR-17 (HTTP Message Factories). It is part of the PHP > Standards > Recommendations (PSR) for HTTP message interfaces. > > The package contains the standard interfaces for creating HTTP requests, > responses, server requests, streams, uploaded files, and URIs, ensuring > interoperability between different HTTP factory implementations. > > Rationale: > This package is required as a dependency for FOSSology, an open source > license > compliance system. FOSSology uses PHP-based tools for source code > analysis and > license detection, which need standardized HTTP message factory > interfaces for > handling HTTP requests and responses in web-based components. > > The php-psr-http-factory package is essential for: > - Providing standardized HTTP factory interfaces for FOSSology components > - Ensuring interoperability with PSR-17 compliant HTTP libraries > - Supporting web-based tools in FOSSology that handle HTTP requests > - Maintaining compatibility with modern PHP HTTP standards > - Enabling consistent HTTP message creation across different > implementations > - Supporting the PSR-17 specification for HTTP message factories > > Technical Details: > - Requires PHP >= 7.0.0 > - Depends on psr/http-message (^1.0) > - Implements PSR-17 HTTP Message Factories specification > - Uses PSR-4 autoloading > - Provides interfaces for all PSR-17 factory types > - MIT licensed for maximum compatibility > - Part of the PHP-FIG standards recommendations > > Dependencies: > - php (>= 7.0.0) > - php-psr-http-message (>= 1.0) > - Build dependencies: phpunit, php-codesniffer > > The package will be maintained by Ahmed Gamal <[email protected]> > as part > of the FOSSology packaging effort. > > -- > Ahmed Gamal > FOSSology Debian Packaging Team > > > > ---------- Forwarded message ---------- > From: William Desportes <[email protected]> > To: 1109364-done <[email protected]>, 1109365-done < > [email protected]>, 1109613-done <[email protected]>, > 1109615-done <[email protected]>, 1109621-done < > [email protected]>, 1109624-done <[email protected]>, > 1109625-done <[email protected]>, 1109632-done < > [email protected]>, 1109633-done <[email protected]>, > 1109634-done <[email protected]>, 1109640-done < > [email protected]> > Cc: > Bcc: > Date: Sun, 10 Aug 2025 15:45:06 +0200 > Subject: The package already exists in Debian > > Please do some research before opening ITP/RFP bugs. > This package already exists in Debian. > > -- > William Desportes
