** Description changed:

  [MIR] iniparser (dependency of mtd-utils)
+ 
+ 
+ [Availability]
+ ✓ The package is in universe.
+ 
+ [Rationale]
+ ✓ The package is a new build dependency of a package that we already
+   support (mtd-utils).
+ 
+ [Security]
+ ✓ No CVEs
+ ✓ No openwall
+ ✓ No security relevant binaries
+ - The github has several items of interest - commits not yet in Debian /
+   Ubuntu that address buffer overflows, not-yet-merged fixes for missing
+   null pointer checks/memory leaks, plus more issues filed with typical C
+   code null checks / off by ones.  Could be OK with some updates to
+   address the known issues.
+ 
+ [Quality assurance]
+ ✓ Used package with minimal effort.  Provides a doc package, and the
+   header file for the lib has the same content.  API behaves mostly as
+   expected and was easy to use just based on the header file.
+ ✓ No debconf usage
+ ✓ No long-term usability affecting bugs
+ ✓ No Debian/Ubuntu bugs aside from this MIR
+ - Upstream bugs of interest present, see security section above
+ - Packaging in Debian seems mostly fine, but I noted that back-to-back
+   invocation of dpkg-buildpackage fails.  A `make -C test clean` would
+   resolve this.
+ ✓ No exotic hardware expectations
+ - While a test suite is present, failures in it are not failing the build.
+ ✓ debian/watch file present
+ - lintian --pedantic reports 6 items total, the most severe of which are 2
+   warnings
+ ✓ No reliance on obsolete/pending-demote packages
+ 
+ [Dependencies]
+ ✓ Dependencies are very modest and already in main. (libc6, and
+   libjs-jquery for doc package)
+ 
+ [Standards compliance]
+ ✓ FHS looks good to me.
+ ✓ Outstanding patches - there is a CMake patch, but upstream doesn't want 
+   it.
+   
https://github.com/ndevilla/iniparser/blob/master/FAQ-en.md#your-build-system-isnt-portable-let-me-help-you
+ - Recommended item DEB_BUILD_OPTIONS isn't explicitly implemented, all 6
+   options currently listed are potentially relevant.
+   
https://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options
+ - The standards version is old https://tracker.debian.org/pkg/iniparser ,
+   however v4.3.0 is an appropriate version for the last time the package
+   was uploaded.
+ 
+ [Maintenance]
+ ✓ foundations-bugs subscribed on 
+   https://bugs.launchpad.net/ubuntu/+source/iniparser/+subscriptions
+ ✓ I consider this a "simple" package which should continue to be in sync
+   with Debian
+ 
+ [Background information]
+ ✓ Package description is appropriate
+ ✓ No recent (or ever) renames

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1913321

Title:
  [MIR] iniparser (dependency of mtd-utils)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/iniparser/+bug/1913321/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to