Public bug reported:

[Availability]
The package python-lark is already in Ubuntu universe.
The package python-lark builds for the architectures it is designed to work on.
It currently builds and works for architectures: all
Link to package https://launchpad.net/ubuntu/+source/python-lark

[Rationale]
- The package python-lark is required in Ubuntu main as part of a new runtime 
requirement for OpenStack Ironic. It has been introduced as a parser for 
trait-based networking filter expressions in this recent commit: 
https://opendev.org/openstack/ironic/commit/aa96982e6df20906102c52841919a77f35ba64c8
- The package python-lark will not generally be useful for a large part of
  our user base, but is important/helpful still because it is a new runtime 
requirement of OpenStack Ironic which we wish to support on Ubuntu Resolute and 
internal infrastructure.
- The package python-lark is a new runtime dependency of package ironic that
  we already support
- There is no other/better way to solve this that is already in main or
  should go universe->main instead of this.
- This is the first time package will be in main
- All other binary packages built by python-lark should remain in universe - 
the binary python-lark-doc is not needed in main

- The package python-lark is required in Ubuntu main no later than
feature freeze due to it being a dependency of OpenStack Ironic, which
is a major piece of the PS9 story.

[Security]
- No CVEs/security issues in this software in the past
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Security has been kept in mind and common isolation/risk-mitigation
  patterns are in place utilizing the following features:
  This is a pure Python library for parsing context-free grammars. It processes
  input text making it robust against memory safety issues common in C/C++
  parsers. It does not use `eval` or `exec` during standard parsing operations.
- Packages does not open privileged ports (ports < 1024).
- Package does not expose any external endpoints
- Packages does not contain extensions to security-sensitive software
  (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does
   not have too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/python-lark/+bug
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=python-lark
- Upstream's bug tracker, https://github.com/lark-parser/lark
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails
   it makes the build fail, link to build log: 
https://launchpad.net/ubuntu/+source/python-lark/1.3.1-1/+build/31454715

- The package runs an autopkgtest, and is currently passing on
   amd64, arm64, armhf, ppc64el, s390x, link to test logs 
https://autopkgtest.ubuntu.com/packages/p/python-lark

- The package does have not failing autopkgtests right now


[Quality assurance - packaging]
- A mechanism to detect and fetch new upstream versions is present and works 
-this package uses a d/upstream/metadata file.
- debian/control defines a correct Maintainer field - the current maintainer 
listed is Debian Python Team as no Ubuntu delta has yet been applied to this 
package.

- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package: 
- Please attach the full output you have got from
   `lintian --pedantic` as an extra post to this bug - N/A.
- Lintian overrides are present, but ok because they prevent a false positive 
from appearing

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default

- Packaging and build is easy, link to debian/rules:
https://git.launchpad.net/ubuntu/+source/python-lark/tree/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- Used check-mir from ubuntu-dev-tools to validate
  all dependencies or recommends are in main -> libjs-bootstrap4 is in universe 
but that’s fine because it is only for the python-lark-doc binary, which can 
remain in universe.

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- The owning team will be ubuntu-openstack and I have their acknowledgment for
  that commitment
- The future owning team is not yet subscribed, but will subscribe to
  the package before promotion


- This does not use static builds
- This does not use vendored code
- This package is not rust based

- The package has been built within the last 3 months in the archive
- Build link on launchpad: 
https://launchpad.net/ubuntu/+source/python-lark/1.3.1-1/+build/31454715

This change will not impact other teams.

[Background information]
The Package description explains the package well
Upstream Name is python-lark
Link to upstream project: https://github.com/lark-parser/lark

** Affects: python-lark (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2140505

Title:
  [MIR] python-lark

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-lark/+bug/2140505/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to