[Pkg-javascript-devel] Debian NEW: automated review of node-lucide 1.55.0-1
dfsg-team at debian.org
dfsg-team at debian.org
Fri Nov 6 06:03:06 GMT 2026
Hi,
Your upload of node-lucide 1.55.0-1 to the NEW queue has had an automated review: an LLM-based check of its licensing and packaging, run by the DFSG team using the Debian Inference service. It is not a decision on the package, and - like other LLM-based work - it can be wrong.
It found 1 blocker, 0 important, 6 minor issues:
- [blocker] [licensing] docs/public ships third-party brand logos under no licence, while debian/copyright calls every file ISC/Expat
- [minor] [licensing] CODE_OF_CONDUCT.md is CC-BY-SA-4.0, but debian/copyright lists it as ISC/Expat by Lucide
- [minor] [licensing] debian/* has no Files stanza; the packaging is attributed to Lucide Icons and Contributor
- [minor] [packaging] Nothing tests the built modules: no debian/tests/control, and the pkg-js test script is commented out
- [minor] [packaging] debian/clean does not remove the sources and licence the build generates inside packages/
- [minor] [packaging] Provides advertises node-lucide-vue (= 0.0.1), a placeholder from the workspace package.json files
- [minor] [packaging] debian/upstream/metadata has a broken Repository-Browse URL ('hhttps')
You can read the full review here:
https://dfsg-new-queue.debian.org/reviews/node-lucide#assistant-report
Please look at it, and respond by visiting the link below (you'll be asked to authenticate with Salsa first):
https://dfsg-new-queue.debian.org/llm-review/WISdaHkRDJt6d7YpgpBus3-pBTdh_Geq
There you may choose to reject the upload yourself, while you fix issues and re-upload, or add comments to clarify or dispute the review.
Your comments are for the DFSG team member who reviews the package, not for the LLM: it will not read them or reply. Tell the reviewer where you think the automated review is right or wrong, and why. Comments are public and shown with the review; you may use markdown, e.g. to link to clarifying information.
If you have any questions, please reply to this e-mail and someone from the
team will respond.
If you would rather not be e-mailed about these reviews, log in at https://dfsg-new-queue.debian.org
and say so on your profile page.
Thanks!
More information about the Pkg-javascript-devel
mailing list