Hi,
Your upload of node-radix-ui 1.6.7+~3.0.0-1 to the NEW queue has had an
automated review: an LLM-based check of its licensing and packaging, run by the
DFSG team using the Debian Inference service. It is not a decision on the
package, and - like other LLM-based work - it can be wrong.
It found 0 blocker, 2 important, 4 minor issues:
- [important] [licensing] colors/ is the npm-published package; index.js,
index.mjs and types/*.d.ts are build output whose sources are missing
- [important] [packaging] Depends omits @floating-ui/react-dom, which the
built popper and every component using it require at runtime
- [minor] [licensing] Overriding Files stanzas drop the WorkOS copyright of
menu.tsx, tooltip.tsx, primitive.tsx and observe-element-rect.ts
- [minor] [packaging] debian/patches/remove-tsup.patch removes .d.ts
generation, leaving package.json `types` entries pointing at files that are
never built
- [minor] [packaging] Vcs-Browser and Vcs-Git point at salsa repository
node-primitives, not the node-radix-ui source package
- [minor] [packaging] Depends includes node-react-test-renderer, which no
shipped module imports
You can read the full review here:
https://dfsg-new-queue.debian.org/reviews/node-radix-ui#assistant-report
Please look at it, and respond by visiting the link below (you'll be asked to
authenticate with Salsa first):
https://dfsg-new-queue.debian.org/llm-review/wNKrqaQlAbsrDQWY74WIq_wEBUb_imaM
There you may choose to reject the upload yourself, while you fix issues and
re-upload, or add comments to clarify or dispute the review.
Your comments are for the DFSG team member who reviews the package, not for the
LLM: it will not read them or reply. Tell the reviewer where you think the
automated review is right or wrong, and why. Comments are public and shown with
the review; you may use markdown, e.g. to link to clarifying information.
If you have any questions, please reply to this e-mail and someone from the
team will respond.
If you would rather not be e-mailed about these reviews, log in at
https://dfsg-new-queue.debian.org
and say so on your profile page.
Thanks!
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
