[Bug 1951129] Re: [MIR] python-autopage

[James Page]

[Summary]
Simple Python helper to enhance CLI application usage

+1 from MIR team for promotion to main; no security review needed.

[Duplication]
There is no other package in main providing the same functionality.

[Dependencies]
OK:
no other Dependencies to MIR due to this
no -dev/-debug/-doc packages that need exclusion

TODO: Problems:

[Embedded sources and static linking]
OK:
no embedded source present
no static linking

[Security]
OK:
history of CVEs does not look concerning
does not run a daemon as root
does not use webkit1,2
does not use lib*v8 directly
does not parse data formats
does not open a port
does not process arbitrary web content
does not use centralized online accounts
does not integrate arbitrary javascript into the desktop
does not deal with system authentication (eg, pam), etc)

[Common blockers]
OK:
does not FTBFS currently
does have a test suite that runs at build time
 - test suite fails will fail the build upon error.
The package has a team bug subscriber
no translation present, but none needed for this case (user visible)?
no new python2 dependency
Python package that is using dh_python

[Packaging red flags]
OK:
Ubuntu does carry a delta, but it is reasonable and maintenance under control
 - Enables unit testing as part of package build.
symbols tracking not applicable for this kind of code.
d/watch is present and looks ok
Upstream update history is OK
Debian/Ubuntu update history is new
the current release is packaged
no massive Lintian warnings
d/rules is rather clean
Does not have Built-Using

[Upstream red flags]
OK:
no Errors/warnings during the build
no incautious use of malloc/sprintf (as far as I can check it)
no use of sudo, gksu, pkexec, or LD_LIBRARY_PATH
no use of user nobody
no use of setuid
no important open bugs (crashers, etc) in Debian or Ubuntu
no dependency on webkit, qtwebkit, seed or libgoa-*
not part of the UI for extra checks


** Changed in: python-autopage (Ubuntu)
       Status: New => Confirmed

** Changed in: python-autopage (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to python-autopage in Ubuntu.
https://bugs.launchpad.net/bugs/1951129

Title:
  [MIR] python-autopage

Status in python-autopage package in Ubuntu:
  Confirmed

Bug description:
  [Availability]

  The package python-autopage is already in Ubuntu universe.
  The package python-autopage build for the architectures it is designed to work on.
  It currently builds and works for architectures: AMD64
  Link to package [[https://launchpad.net/ubuntu/+source/python-autopage]]

  [Rationale]

  - The package python-autopage is required in Ubuntu main for python-cliff
   - The package python-autopage will not generally be useful for a large part of
     our user base, but is important/helpful still because it is an OpenStack requirement
  - The package python-autopage is a new runtime dependency of package python-cliff
    that we already support

  [Security]

  No CVEs/security issues in this software in the past

  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`

  - Package does not install services
  - Packages does not open privileged ports (ports < 1024)

  [Quality assurance - function/usage]

  - The package works well right after install

  [Quality assurance - maintenance]

  - The package is maintained well in Debian/Ubuntu and has not too many
    and long term critical bugs open
  - The package does not deal with exotic hardware we cannot support

  [Quality assurance - testing]

  - The package does not run a test at build time

  - The package does not run an autopkgtest

  - The package does have not failing autopkgtests right now

  [Quality assurance - packaging]

  - debian/watch is present and works

  - This package does not yield massive lintian Warnings, Errors
  - The only lintian warnings or errors:
    - E: python-autopage changes: bad-distribution-in-changes-file unstable
    - W: python-autopage source: newer-standards-version 4.6.0 (current is 4.5.1)
  - Lintian overrides are not present

  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies

  - The package will not be installed by default

  - Packaging and build is easy, link to d/rules
  [[https://salsa.debian.org/openstack-team/python/python-
  autopage/-/blob/debian/0.4.0-2/debian/rules]]

  [UI standards]

  - Application is not end-user facing (does not need translation)

  [Dependencies]

  - No further depends or recommends dependencies that are not yet in
  main

  [Standards compliance]

  - This package correctly follows FHS and Debian Policy

  [Maintenance/Owner]

  - Owning Team will be OpenStack

  - This does not use static builds
  - This does not use vendored code

  [Background information]

  The Package description explains the package well
  Upstream Name is autopage
  Link to upstream project https://github.com/zaneb/autopage

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-autopage/+bug/1951129/+subscriptions