Hi,
Your upload of node-lucide 1.52.0-1 to the NEW queue has had an automated
review: an LLM-based check of its licensing and packaging, run by the DFSG team
using the Debian Inference service. It is not a decision on the package, and -
like other LLM-based work - it can be wrong.
It found 1 blocker, 5 important, 4 minor issues:
- [blocker] [licensing] debian/copyright omits the Debian packaging copyright
- [important] [packaging] Build script never builds the component that
debian/main declares
- [important] [packaging] Declared ESM entry point is never produced
- [important] [packaging] Vue icon generator passes metadata JSON as SVG node
data
- [important] [packaging] Patch imports a rollup plugin name the
Build-Depends does not provide
- [important] [packaging] Binary package has no dependency on nodejs
- [minor] [packaging] Autopkgtest always succeeds because its only command is
commented out
- [minor] [packaging] Upstream tarball ships an Angular build cache with
developer paths
- [minor] [packaging] Clean does not undo the generated Vue sources and the
rewritten tsconfig
- [minor] [packaging] Typo in debian/upstream/metadata Repository-Browse
You can read the full review here:
https://dfsg-new-queue.debian.org/reviews/node-lucide#assistant-report
Please look at it, and respond by visiting the link below (you'll be asked to
authenticate with Salsa first):
https://dfsg-new-queue.debian.org/llm-review/PUexj0FtO6LXUW7gJHmKthFebOy7Z-ki
There you may choose to reject the upload yourself, while you fix issues and
re-upload, or add comments to clarify or dispute the review. Comments are
public, and in particular are shown to the DFSG reviewer with the review. You
may also use markdown in case you want to link to further clarifying
information.
If you have any questions, please reply to this e-mail and someone from the
team will respond.
Thanks!
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
