[Pkg-rust-maintainers] Debian NEW: automated review of rust-fips204-ffi 0.5.0-1

[dfsg-team at debian.org]

Hi,

Your upload of rust-fips204-ffi 0.5.0-1 to the NEW queue has had an automated review: an LLM-based check of its licensing and packaging, run by the DFSG team using the Debian Inference service. It is not a decision on the package, and - like other LLM-based work - it can be wrong.

It found 1 blocker, 1 important, 1 minor issues:

  - [blocker] [licensing] debian/copyright does not name RustCrypto Developers, the copyright holder in LICENSE-MIT
  - [important] [packaging] Build-Depends-Arch omits librust-pastey-dev, which src/lib.rs imports, so the build will fail
  - [minor] [packaging] clean does not remove the C test binaries that the build writes into tests/

You can read the full review here:

    https://dfsg-new-queue.debian.org/reviews/rust-fips204-ffi#assistant-report

Please look at it, and respond by visiting the link below (you'll be asked to authenticate with Salsa first):

    https://dfsg-new-queue.debian.org/llm-review/fb9NhDcWlz651E3h8wu0cOeDif8u7DLu

There you may choose to reject the upload yourself, while you fix issues and re-upload, or add comments to clarify or dispute the review.

Your comments are for the DFSG team member who reviews the package, not for the LLM: it will not read them or reply. Tell the reviewer where you think the automated review is right or wrong, and why. Comments are public and shown with the review; you may use markdown, e.g. to link to clarifying information.

If you have any questions, please reply to this e-mail and someone from the
team will respond.

Thanks!