$ lintian --pedantic python-botocore_1.34.46+repack-1.dsc P: python-botocore source: package-uses-old-debhelper-compat-version 12 P: python-botocore source: silent-on-rules-requiring-root [debian/control]
** Description changed: - TODO + [Availability] + The package python-botocore is already in Ubuntu universe. + The package python-botocore build for the architectures it is designed to work on. + They build amd64 only (but binary is arch-all) + Link to package: https://launchpad.net/ubuntu/+source/python-botocore + + [Rationale] + The package python-botocore is required in Ubuntu main for python-boto3 as an indirect dependency + The package python-botocore will not generally be useful for a large part of + our user base, but is important/helpful still because it is required by python-boto3 + which is in the MIR process as a dependency of simplestreams. + python-boto3 MIR link: https://bugs.launchpad.net/ubuntu/+source/python-boto3/+bug/2061217 + + - The package python-botocore is required in Ubuntu main through the + same scheduled requested for the python-boto3 promotion, since python- + boto3 depends on it. + + [Security] + - No CVEs/security issues in this software in the past: + (0)https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=python-botocore + (0)https://security-tracker.debian.org/tracker/source-package/python-botocore + (0)https://ubuntu.com/security/cves?q=&package=python-botocore&priority=&version=&status= + + No `suid` or `sgid` binaries + No executables in `/sbin` and `/usr/sbin` + Package does not install services, timers or recurring jobs + Packages does not open privileged ports (ports < 1024). + Package does not expose any external endpoints + Packages does not contain extensions to security-sensitive software + (filters, scanners, plugins, UI skins, ...) + + [Quality assurance - function/usage] + The package works well right after install. It's a python library. + + [Quality assurance - maintenance] + - The package is maintained well in Debian/Ubuntu/Upstream and does + not have too many, long-term & critical, open bugs + - Ubuntu (4)https://bugs.launchpad.net/ubuntu/+source/python-botocore/+bugs + - Debian (1)https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=python-botocore + - Upstream's bug tracker (112)https://github.com/boto/botocore/issues + Looks normal for the age and impact of these libraries + - The package does not deal with exotic hardware we cannot support + + [Quality assurance - testing] + - The package does not run a test at build time because it is not configured to do so, + the upstream source code contains unit tests + - The package does not run an autopkgtest because they are not configured to do so. + + [Quality assurance - packaging] + - debian/watch is present and works + - debian/control defines a correct Maintainer field + - Lintian does not run as part of the build + https://launchpadlibrarian.net/715514517/buildlog_ubuntu-noble-amd64.python-botocore_1.34.46+repack-1_BUILDING.txt.gz + - Lintian overrides are present, but ok because they are justified: + + # This is a false positive, likely an occurrence of #1019980 + python-botocore source: source-is-missing [docs/source/_templates/page.html] + + - This package does not rely on obsolete or about to be demoted packages. + - This package has no python2 or GTK2 dependencies + - The package will not be installed by default + - Packaging and build is easy, link to debian/rules: + https://git.launchpad.net/ubuntu/+source/python-botocore/tree/debian/rules + + [UI standards] + - Application is not end-user facing (does not need translation) + + [Dependencies] + - No further depends or recommends dependencies that are not yet in main + + [Standards compliance] + - This package correctly follows FHS and Debian Policy + + [Maintenance/Owner] + - The owning team will be Ubuntu Server and I have their acknowledgement for + that commitment + - The future owning team is already subscribed to the package + - This does not use static builds + - This does not use vendored code + - This package is not rust based + + [Background information] + The Package description explains the package well + Upstream Name is botocore + Link to upstream project https://github.com/boto/botocore ** Description changed: [Availability] The package python-botocore is already in Ubuntu universe. The package python-botocore build for the architectures it is designed to work on. They build amd64 only (but binary is arch-all) Link to package: https://launchpad.net/ubuntu/+source/python-botocore [Rationale] The package python-botocore is required in Ubuntu main for python-boto3 as an indirect dependency The package python-botocore will not generally be useful for a large part of our user base, but is important/helpful still because it is required by python-boto3 which is in the MIR process as a dependency of simplestreams. python-boto3 MIR link: https://bugs.launchpad.net/ubuntu/+source/python-boto3/+bug/2061217 - The package python-botocore is required in Ubuntu main through the same scheduled requested for the python-boto3 promotion, since python- boto3 depends on it. [Security] - No CVEs/security issues in this software in the past: (0)https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=python-botocore (0)https://security-tracker.debian.org/tracker/source-package/python-botocore (0)https://ubuntu.com/security/cves?q=&package=python-botocore&priority=&version=&status= No `suid` or `sgid` binaries No executables in `/sbin` and `/usr/sbin` Package does not install services, timers or recurring jobs Packages does not open privileged ports (ports < 1024). Package does not expose any external endpoints Packages does not contain extensions to security-sensitive software (filters, scanners, plugins, UI skins, ...) [Quality assurance - function/usage] The package works well right after install. It's a python library. [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs - Ubuntu (4)https://bugs.launchpad.net/ubuntu/+source/python-botocore/+bugs - Debian (1)https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=python-botocore - Upstream's bug tracker (112)https://github.com/boto/botocore/issues Looks normal for the age and impact of these libraries - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run a test at build time because it is not configured to do so, the upstream source code contains unit tests - The package does not run an autopkgtest because they are not configured to do so. [Quality assurance - packaging] - debian/watch is present and works - debian/control defines a correct Maintainer field - Lintian does not run as part of the build - https://launchpadlibrarian.net/715514517/buildlog_ubuntu-noble-amd64.python-botocore_1.34.46+repack-1_BUILDING.txt.gz + https://launchpadlibrarian.net/715514517/buildlog_ubuntu-noble-amd64.python-botocore_1.34.46+repack-1_BUILDING.txt.gz + - Lintian output attached - Lintian overrides are present, but ok because they are justified: # This is a false positive, likely an occurrence of #1019980 python-botocore source: source-is-missing [docs/source/_templates/page.html] - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will not be installed by default - Packaging and build is easy, link to debian/rules: https://git.launchpad.net/ubuntu/+source/python-botocore/tree/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - The owning team will be Ubuntu Server and I have their acknowledgement for - that commitment + that commitment - The future owning team is already subscribed to the package - This does not use static builds - This does not use vendored code - This package is not rust based [Background information] The Package description explains the package well Upstream Name is botocore Link to upstream project https://github.com/boto/botocore -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061751 Title: [MIR] python-botocore as indirect dependency of simplestreams (simplestreams -> python-boto3 -> python-s3transfer -> python- botocore) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/python-botocore/+bug/2061751/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
