I'll address the dfsg-new-queue comments.

I don't really understand the issue. The blocker is legit, copyright is not
installed.

drwxr-xr-x root/root         0 2026-10-18 11:26 ./
drwxr-xr-x root/root         0 2026-10-18 11:26 ./usr/
drwxr-xr-x root/root         0 2026-10-18 11:26 ./usr/share/
drwxr-xr-x root/root         0 2026-10-18 11:26 ./usr/share/doc/
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel/
-rw-r--r-- root/root      2110 2026-10-18 11:26
./usr/share/doc/node-side-channel/README.md
-rw-r--r-- root/root       171 2026-10-18 11:26
./usr/share/doc/node-side-channel/changelog.Debian.gz
-rw-r--r-- root/root      3608 2026-10-18 11:26
./usr/share/doc/node-side-channel/changelog.gz
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel-list/
-rw-r--r-- root/root      2285 2026-10-18 11:26
./usr/share/doc/node-side-channel-list/README.md
-rw-r--r-- root/root       750 2026-10-18 11:26
./usr/share/doc/node-side-channel-list/changelog.gz
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel-map/
-rw-r--r-- root/root      2278 2026-10-18 11:26
./usr/share/doc/node-side-channel-map/README.md
-rw-r--r-- root/root       584 2026-10-18 11:26
./usr/share/doc/node-side-channel-map/changelog.gz
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel-weakmap/
-rw-r--r-- root/root      2342 2026-10-18 11:26
./usr/share/doc/node-side-channel-weakmap/README.md
-rw-r--r-- root/root       625 2026-10-18 11:26
./usr/share/doc/node-side-channel-weakmap/changelog.gz
drwxr-xr-x root/root         0 2026-10-18 11:26 ./usr/share/nodejs/
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/nodejs/side-channel/
-rw-r--r-- root/root       486 2026-10-18 11:26
./usr/share/nodejs/side-channel/index.d.ts
-rw-r--r-- root/root      1222 2026-10-18 11:26
./usr/share/nodejs/side-channel/index.js
-rw-r--r-- root/root      2362 2026-10-18 11:26
./usr/share/nodejs/side-channel/package.json
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/nodejs/side-channel-list/
-rw-r--r-- root/root       335 2026-10-18 11:26
./usr/share/nodejs/side-channel-list/index.d.ts
-rw-r--r-- root/root      3289 2026-10-18 11:26
./usr/share/nodejs/side-channel-list/index.js
-rw-r--r-- root/root       721 2026-10-18 11:26
./usr/share/nodejs/side-channel-list/list.d.ts
-rw-r--r-- root/root      2258 2026-10-18 11:26
./usr/share/nodejs/side-channel-list/package.json
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/nodejs/side-channel-map/
-rw-r--r-- root/root       367 2026-10-18 11:26
./usr/share/nodejs/side-channel-map/index.d.ts
-rw-r--r-- root/root      1981 2026-10-18 11:26
./usr/share/nodejs/side-channel-map/index.js
-rw-r--r-- root/root      2336 2026-10-18 11:26
./usr/share/nodejs/side-channel-map/package.json
drwxr-xr-x root/root         0 2026-10-18 11:26
./usr/share/nodejs/side-channel-weakmap/
-rw-r--r-- root/root       382 2026-10-18 11:26
./usr/share/nodejs/side-channel-weakmap/index.d.ts
-rw-r--r-- root/root      2708 2026-10-18 11:26
./usr/share/nodejs/side-channel-weakmap/index.js
-rw-r--r-- root/root      2447 2026-10-18 11:26
./usr/share/nodejs/side-channel-weakmap/package.json
lrwxrwxrwx root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel-list/copyright ->
../node-side-channel/copyright
lrwxrwxrwx root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel-map/copyright ->
../node-side-channel/copyright
lrwxrwxrwx root/root         0 2026-10-18 11:26
./usr/share/doc/node-side-channel-weakmap/copyright ->
../node-side-channel/copyright

Le mer. 21 oct. 2026 à 14:06, Xavier <[email protected]> a écrit :

> I won't answer to this joke and continue to waste time. If someone else
> want to fix node-qs CVE, feel free.
>
> Le 21/10/2026 à 04:10, Nicolas Mora a écrit :
> >
> > In the file d/rules, the block override_dh_installdocs doesn't run
> dh_installdocs, therefore the copyright file isn't shipped in the package.
> >
> > Also, the author in d/changelog (Xavier Guimard <[email protected]>)
> isn't exactly the same as the uploader in d/control (Yadd <[email protected]>),
> so lintian is not happy and beleives it's a NMU without noticing it's a NMU.
> >
> > Further information may be found at:
> >     https://dfsg-new-queue.debian.org/reviews/node-side-channel
> >
> > What to do next:
> >
> > Unless the review says otherwise, this is a request for changes to this
> > upload and not a rejection of the package itself. Please fix the points
> > raised and upload again in the usual way, saying in the changelog what
> > has changed. The reviewer is told when a package they have reviewed is
> > uploaded again, and will normally look at it ahead of the rest of their
> > queue.
> >
> > If anything in the review is unclear, or you believe it is mistaken,
> > please reply to this email. Your reply goes to the reviewer, and that is
> > the normal first step.
> >
> > Questions about uploading again:
> >     https://dfsg-new-queue.debian.org/docs/FAQ#resubmit
> > Common reasons for rejection:
> >     https://dfsg-new-queue.debian.org/docs/FAQ/REJECT
> >
> > Regards, Nicolas Mora
> > Member of the DFSG, Licensing & New Packages Team
> >
> >
> >
> > ===
> >
> > Please feel free to respond to this email if you don't understand why
> > your files were rejected, or if you upload new files which address our
> > concerns.
>
>
> --
> Pkg-javascript-devel mailing list
> [email protected]
>
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
>
-- 
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to