Sign me up Login

Details about package libkysdk-system

Name:	libkysdk-system
Uploader:	xibowen <xibowen@openkylin.top> (Debian QA page)
Description:	libkysdk-system - Kylin System Layer Developer Kit libkysdk-system-dev - Kylin System Layer Developer Kit - Development Library

Package uploads

Upload #1

Information

Version:	2.2.3.5-1
Uploaded:	2024-01-16 09:55
Source package:	libkysdk-system_2.2.3.5-1.dsc
Distribution:	unstable
Section:	libs
Priority:	optional
Homepage:	https://gitee.com/openkylin/libkysdk-system
Vcs-Git:	https://gitee.com/openkylin/libkysdk-system.git
Vcs-Browser:	https://gitee.com/openkylin/libkysdk-system
Closes bugs:	#1031340

Changelog

 libkysdk-system (2.2.3.5-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1031340)

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 13

–

A watch file is present but doesn't work

Warnings:

In watchfile debian/watch, reading webpage
https://gitee.com/openkylin/libkysdk-system/releases/ failed: 500 Can't connect to gitee.com:443 (Connection timed out)

–
Package is not native

Format: 3.0 (quilt)
–
The uploader is not in the package's "Maintainer" or "Uploaders" fields
User email

xibowen@openkylin.top

"Maintainer" email

team+kylin@tracker.debian.org

"Uploaders" emails
- xibowen@kylinos.cn
–
Package has lintian informational tags
libkysdk-system source
- I out-of-date-standards-version
  - 4.6.1.0 (released 2022-05-11) (current is 4.6.2)
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X upstream-metadata-file-is-missing
–
Package closes ITP bug
- libkysdk-system:
  - #1031340 (Wishlist, ITP): ITP: libkysdk-system -- Kylin System Layer Developer Kit
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: Zhikai Chen <chenzhikai@kylinos.cn>

Licenses: LGPL-2.1 or LGPL-3, Expat, LGPL-3

Comments

This is not a complete review:

1. The package name suggests that it is a shared library, but it depends on packages like cron and systemd, this is unusual. Please adjust either the package names or dependencies, maybe add a -runtime package.

2. When a package depends on systemd, it can make use of systemd timers, why is explicit dependency on cron needed?

3. The package description says it's a meta package, but also provides shared library, this is a conflict.

4. The package contains HTTP service for HTTP and websocket API, are these mandatory or optional? Exposing an HTTP service is a potential security risk, please make it optional and split to dedicate package which users can opt-in.

Needs work Aron Xu at Feb. 22, 2024, 2:57 a.m.

Upstream Contact:	Zhikai Chen <chenzhikai@kylinos.cn>
Licenses:	LGPL-2.1 or LGPL-3, Expat, LGPL-3