[Pkg-rust-maintainers] Debian NEW review of uv 0.9.16+ds1-1: REJECTED

[siretart at debian.org]

The Debian NEW review of uv 0.9.16+ds1-1 has been completed.

Decision: REJECTED
Reviewer: Reinhard Tartler

Review comment:

Findings and Blockers





Incomplete Copyright Attribution: The files in crates/uv-python/python/packaging/ are derived from the packaging project. They are copyrighted by Donald Stufft and individual contributors and licensed under BSD-2-Clause or Apache-2.0. This needs a dedicated stanza in debian/copyright.





License Mismatch: crates/uv-platform/src/libc.rs contains code from glibc-version-rs which is Apache-2.0 only. The current debian/copyright catch-all ("Expat or Apache-2.0") is technically inaccurate for this specific file.








Regarding the included test cases, I concur with Andrew. Please make a note in Debian/copyright along the lines "the binary files in scripts/links are carefully curated test fixtures that accompany the tests. They are easily unpacked and have trivial contents".





Thanks for working on the package, I'm looking forward to accepting the package with the issues above fixed.

Full review details: https://dfsg-new-queue.debian.org/reviews/uv