cmd: lintian --no-cfg --display-level '>=classification' --display-experimental --info --show-overrides '/tmp/debusine-fetch-exec-upload-zigffzw0/libcarddav_14.1.6~pre2-0debian14.0.0+3~b.dsc' '/tmp/debusine-fetch-exec-upload-zigffzw0/libcarddav-dev_14.1.6~pre2-0debian14.0.0+3~b_riscv64.deb' '/tmp/debusine-fetch-exec-upload-zigffzw0/libcarddav0-dbgsym_14.1.6~pre2-0debian14.0.0+3~b_riscv64.deb' '/tmp/debusine-fetch-exec-upload-zigffzw0/libcarddav0_14.1.6~pre2-0debian14.0.0+3~b_riscv64.deb' output (contains stderr only, stdout was captured): Files in working directory: lintian.txt -------------------- N: I: libcarddav source: debian-watch-file-is-missing N: N: This source package is not Debian-native but it does not have a N: debian/watch file. This file is used for automatic detection of new N: upstream versions by the Debian External Health Status project and other N: project infrastructure. If this package is maintained upstream, please N: consider adding a debian/watch file to detect new releases. N: N: If the package is not maintained upstream or if upstream uses a N: distribution mechanism that cannot be meaningfully monitored by uscan and N: the Debian External Health Status project, please consider adding a N: debian/watch file containing only comments documenting the situation. N: N: Please refer to Upstream source location: debian/watch (Section 4.11) in N: the Debian Policy Manual and the uscan(1) manual page for details. N: N: Visibility: info N: Show-Always: no N: Check: debian/watch N: N: I: libcarddav source: duplicate-short-description libcarddav-dev libcarddav0 [debian/control] N: N: The listed binary packages all share the same short description, i.e. the N: first line of the Description field in debian/control. N: N: Please add a word or two, in parentheses if needed, to describe to users N: what they are installing. N: N: It is not okay to rely solely on package naming conventions to indicate N: what is inside. N: N: Visibility: info N: Show-Always: no N: Check: debian/control/field/description/duplicate N: N: I: libcarddav0: extended-description-is-probably-too-short N: N: The extended description (the lines after the first line of the N: "Description:" field) is only one or two lines long. The extended N: description should provide a user with enough information to decide N: whether they want to install this package, what it contains, and how it N: compares to similar packages. One or two lines is normally not enough to N: do this. N: N: Please refer to General guidelines for package descriptions (Section N: 6.2.1) in the Debian Developer's Reference and The long description N: (Section 6.2.3) in the Debian Developer's Reference for details. N: N: Visibility: info N: Show-Always: no N: Check: fields/description N: N: I: libcarddav0: hardening-no-bindnow [usr/lib/riscv64-linux-gnu/libcarddav.so.0.0.6] N: N: This package provides an ELF binary that lacks the "bindnow" linker flag. N: N: This is needed (together with "relro") to make the "Global Offset Table" N: (GOT) fully read-only. The bindnow feature trades startup time for N: improved security. Please consider enabling this feature or consider N: overriding the tag (possibly with a comment about why). N: N: If you use dpkg-buildflags, you may have to add hardening=+bindnow or N: hardening=+all to DEB_BUILD_MAINT_OPTIONS. N: N: The relevant compiler flags are set in LDFLAGS. N: N: Please refer to https://wiki.debian.org/Hardening for details. N: N: Visibility: info N: Show-Always: no N: Check: binaries/hardening N: N: I: libcarddav source: no-dh-sequencer [debian/rules] N: N: This package does not use the dh sequencer in debian/rules. N: N: While maintainers may use a variety of build systems, this one is by far N: the most popular. N: N: Maintainers are strongly encouraged to use the dh sequencer in new N: packages and convert existing ones when appropriate. N: N: Visibility: info N: Show-Always: no N: Check: debian/rules/dh-sequencer N: N: I: libcarddav0: no-symbols-control-file usr/lib/riscv64-linux-gnu/libcarddav.so.0.0.6 N: N: Although the package includes a shared library, the package does not have N: a symbols control file. N: N: dpkg can use symbols files in order to generate more accurate library N: dependencies for applications, based on the symbols from the library that N: are actually used by the application. N: N: Please refer to the dpkg-gensymbols(1) manual page and N: https://wiki.debian.org/UsingSymbolsFiles for details. N: N: Visibility: info N: Show-Always: no N: Check: debian/shlibs N: N: I: libcarddav source: out-of-date-standards-version 3.8.4 (released 2010-01-27) (current is 4.7.3) N: N: The source package refers to a Standards-Version older than the one that N: was current at the time the package was created (according to the N: timestamp of the latest debian/changelog entry). Please consider updating N: the package to current Policy and setting this control field N: appropriately. N: N: If the package is already compliant with the current standards, you don't N: have to re-upload the package just to adjust the Standards-Version control N: field. However, please remember to update this field next time you upload N: the package. N: N: See /usr/share/doc/debian-policy/upgrading-checklist.txt.gz in the N: debian-policy package for a summary of changes in newer versions of N: Policy. N: N: Please refer to N: https://www.debian.org/doc/debian-policy/upgrading-checklist.html for N: details. N: N: Visibility: info N: Show-Always: no N: Check: fields/standards-version N: N: P: libcarddav source: no-dep5-copyright [debian/copyright] N: N: This package does not use a machine-readable debian/copyright file. N: N: This format makes it easier to review licenses and can be easily parsed by N: Lintian. N: N: Please refer to N: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ for N: details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/copyright/dep5 N: N: P: libcarddav source: no-homepage-field N: N: This non-native package lacks a Homepage field. If the package has an N: upstream home page that contains useful information or resources for the N: end user, consider adding a Homepage control field to debian/control. N: N: Please refer to Homepage (Section 5.6.23) in the Debian Policy Manual for N: details. N: N: Visibility: pedantic N: Show-Always: no N: Check: fields/homepage N: N: P: libcarddav source: package-uses-old-debhelper-compat-version 10 N: N: This package uses a debhelper compatibility level that is no longer N: recommended. Please consider using the recommended level. N: N: For most packages, the best way to set the compatibility level is to N: specify debhelper-compat (= X) as a Build-Depends in debian/control. You N: can also use the debian/compat file or export DH_COMPAT in debian/rules. N: N: If no level is selected debhelper defaults to level 1, which is N: deprecated. N: N: Please refer to the debhelper(7) manual page for details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debhelper N: N: P: libcarddav source: redundant-priority-optional-field [debian/control:3] N: N: This package currently sets the Priority field in the debian/control file N: to "optional". N: N: As of dpkg version 1.22.13, this field is set to "optional" by default. As N: such, in this case the Priority field is redundant and should be removed. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/control/field/priority N: N: X: libcarddav source: upstream-metadata-file-is-missing N: N: This source package is not Debian-native but it does not have a N: debian/upstream/metadata file. N: N: The Upstream MEtadata GAthered with YAml (UMEGAYA) project is an effort to N: collect meta-information about upstream projects from any source package. N: This file is in YAML format and it is used in to feed the data in the N: UltimateDebianDatabase. For example, it can contains the way the authors N: want their software be cited in publications and some bibliographic N: references about the software. N: N: Please add a debian/upstream/metadata file. N: N: Please refer to https://dep-team.pages.debian.net/deps/dep12/ and N: https://wiki.debian.org/UpstreamMetadata for details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/upstream/metadata N: This tag is experimental. N: N: C: libcarddav-dev: control-tarball-compression-format xz N: N: This is the compressor format used for the control.tar tarball. N: N: Visibility: classification N: Show-Always: no N: Check: deb-format N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav0: control-tarball-compression-format xz N: C: libcarddav0-dbgsym: control-tarball-compression-format xz N: C: libcarddav-dev: data-tarball-compression-format xz N: N: This is the compressor format used for the data.tar tarball. N: N: Visibility: classification N: Show-Always: no N: Check: deb-format N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav0: data-tarball-compression-format xz N: C: libcarddav0-dbgsym: data-tarball-compression-format xz N: C: libcarddav source: debhelper-compat-level 10 N: N: This is the debhelper compat level used specified by this package. N: N: Visibility: classification N: Show-Always: no N: Check: debhelper N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: debian-build-system cdbs-with-debhelper.mk, debhelper [debian/rules] N: N: This is the build system that Lintian believes the package is using. N: N: Visibility: classification N: Show-Always: no N: Check: debhelper N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: mail-contact Maintainer "TDE Debian Team" N: N: This person is a contact in the named group for this package. N: N: Visibility: classification N: Show-Always: no N: Check: fields/mail-address N: Renamed from: maintainer uploader N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav-dev: mail-contact Maintainer "TDE Debian Team" N: C: libcarddav0: mail-contact Maintainer "TDE Debian Team" N: C: libcarddav0-dbgsym: mail-contact Maintainer "TDE Debian Team" N: C: libcarddav-dev: no-ctrl-scripts N: N: The package does not rely on any maintainer scripts (or other executable N: control files). N: N: Visibility: classification N: Show-Always: no N: Check: control-files N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav0: no-ctrl-scripts N: C: libcarddav0-dbgsym: no-ctrl-scripts N: C: libcarddav source: number-of-patches 0 [debian/patches/series] N: N: The number of patches according to the debian/patches/series file. N: N: Visibility: classification N: Show-Always: no N: Check: debian/patches/count N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: package-is-maintained-by-individual N: N: The package is maintained by an individual according to the N: maintainer/uploaders fields in the debian/control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/vcs N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav-dev: package-is-maintained-by-individual N: C: libcarddav0: package-is-maintained-by-individual N: C: libcarddav0-dbgsym: package-is-maintained-by-individual N: C: libcarddav source: patch-system quilt N: N: This package uses the specified patch system (eg. "quilt" or "dpatch"). N: N: Visibility: classification N: Show-Always: no N: Check: debian/patches N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: rules-do-not-require-root [debian/control] N: N: The sources can build the installation packages without using fakeroot(1) N: or similar. N: N: Please refer to usr/share/doc/dpkg/spec/rootless-builds.txt, debian/rules N: and Rules-Requires-Root (Section 4.9.2) in the Debian Policy Manual, and N: Rules-Requires-Root (Section 5.6.31) in the Debian Policy Manual for N: details. N: N: Visibility: classification N: Show-Always: no N: Check: debian/control/field/rules-requires-root N: Renamed from: rules-does-not-require-root N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: source-format 3.0 (quilt) N: N: This is the source format declared in the package. N: N: Visibility: classification N: Show-Always: no N: Check: debian/source-dir N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: standards-version 3.8.4 N: N: The standards version of the package according to Standards-Version field N: in the debian/control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/standards-version N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: trimmed-deb822-field §1 Build-Depends cdbs, tde-cdbs, debhelper (>= 10~), quilt, tde-cmake, ninja-build, libcurl4-gnutls-dev, libglib2.0-dev [debian/control:5] N: N: The raw but trimmed contents of the named field in the given Deb822 file. N: The number indicates the section from the top, starting at 1. N: N: Visibility: classification N: Show-Always: no N: Check: fields/deb822 N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: trimmed-deb822-field §1 Maintainer TDE Debian Team [debian/control:4] N: C: libcarddav source: trimmed-deb822-field §1 Priority optional [debian/control:3] N: C: libcarddav source: trimmed-deb822-field §1 Section graphics [debian/control:2] N: C: libcarddav source: trimmed-deb822-field §1 Source libcarddav [debian/control:1] N: C: libcarddav source: trimmed-deb822-field §1 Standards-Version 3.8.4 [debian/control:6] N: C: libcarddav source: trimmed-deb822-field §2 Architecture any [debian/control:9] N: C: libcarddav source: trimmed-deb822-field §2 Conflicts libcarddav [debian/control:12] N: C: libcarddav source: trimmed-deb822-field §2 Depends ${shlibs:Depends}, ${misc:Depends} [debian/control:15] N: C: libcarddav source: trimmed-deb822-field §2 Description libcarddav - a carddav PIM clients library\n libcarddav provides a C interface for carddav PIM clients [debian/control:16] N: C: libcarddav source: trimmed-deb822-field §2 Multi-Arch same [debian/control:10] N: C: libcarddav source: trimmed-deb822-field §2 Package libcarddav0 [debian/control:8] N: C: libcarddav source: trimmed-deb822-field §2 Provides libcarddav [debian/control:13] N: C: libcarddav source: trimmed-deb822-field §2 Replaces libcarddav [debian/control:14] N: C: libcarddav source: trimmed-deb822-field §2 Section libs [debian/control:11] N: C: libcarddav source: trimmed-deb822-field §3 Architecture any [debian/control:20] N: C: libcarddav source: trimmed-deb822-field §3 Depends libcarddav0 (= ${binary:Version}), ${misc:Depends} [debian/control:22] N: C: libcarddav source: trimmed-deb822-field §3 Description libcarddav - a carddav PIM clients library\n libcarddav provides a C interface for carddav PIM clients\n .\n This is the development package containing header files and link\n libraries for libcarddav. [debian/control:23] N: C: libcarddav source: trimmed-deb822-field §3 Package libcarddav-dev [debian/control:19] N: C: libcarddav source: trimmed-deb822-field §3 Section libdevel [debian/control:21] N: C: libcarddav source: trimmed-field Architecture any N: N: These are the raw but trimmed contents of the named field in the package's N: primary control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/trimmed N: This tag is a classification. There is no issue in your package. N: N: C: libcarddav source: trimmed-field Binary libcarddav0, libcarddav-dev N: C: libcarddav source: trimmed-field Build-Depends cdbs, tde-cdbs, debhelper (>= 10~), quilt, tde-cmake, ninja-build, libcurl4-gnutls-dev, libglib2.0-dev N: C: libcarddav source: trimmed-field Checksums-Sha1 b25f270fd7c4974a643c58ae2b68d50ab43c78f9 182088 libcarddav_14.1.6~pre2.orig.tar.xz\n 57fb657e4b2b9f18655fe578d0130bf68ecee6e3 2620 libcarddav_14.1.6~pre2-0debian14.0.0+3~b.debian.tar.xz N: C: libcarddav source: trimmed-field Checksums-Sha256 f2ad6101a06411f9b162253136406bd21c089d5a2a9a2778f5afd69ca21ce678 182088 libcarddav_14.1.6~pre2.orig.tar.xz\n dbf26613d38debac1cee4413d247117417d6b2844a1af088d3174068ea872020 2620 libcarddav_14.1.6~pre2-0debian14.0.0+3~b.debian.tar.xz N: C: libcarddav source: trimmed-field Files dee110414d8a4fde6a5bac57ef823331 182088 libcarddav_14.1.6~pre2.orig.tar.xz\n 6fda5cbe8e5fd8bd8fb2eb44f326ea9c 2620 libcarddav_14.1.6~pre2-0debian14.0.0+3~b.debian.tar.xz N: C: libcarddav source: trimmed-field Format 3.0 (quilt) N: C: libcarddav source: trimmed-field Maintainer TDE Debian Team N: C: libcarddav source: trimmed-field Package-List libcarddav-dev deb libdevel optional arch=any\n libcarddav0 deb libs optional arch=any N: C: libcarddav source: trimmed-field Source libcarddav N: C: libcarddav source: trimmed-field Standards-Version 3.8.4 N: C: libcarddav source: trimmed-field Version 4:14.1.6~pre2-0debian14.0.0+3~b N: C: libcarddav-dev: trimmed-field Architecture riscv64 N: C: libcarddav-dev: trimmed-field Depends libcarddav0 (= 4:14.1.6~pre2-0debian14.0.0+3~b) N: C: libcarddav-dev: trimmed-field Description libcarddav - a carddav PIM clients library\n libcarddav provides a C interface for carddav PIM clients\n .\n This is the development package containing header files and link\n libraries for libcarddav. N: C: libcarddav-dev: trimmed-field Installed-Size 31 N: C: libcarddav-dev: trimmed-field Maintainer TDE Debian Team N: C: libcarddav-dev: trimmed-field Package libcarddav-dev N: C: libcarddav-dev: trimmed-field Priority optional N: C: libcarddav-dev: trimmed-field Section libdevel N: C: libcarddav-dev: trimmed-field Source libcarddav N: C: libcarddav-dev: trimmed-field Version 4:14.1.6~pre2-0debian14.0.0+3~b N: C: libcarddav0: trimmed-field Architecture riscv64 N: C: libcarddav0: trimmed-field Conflicts libcarddav N: C: libcarddav0: trimmed-field Depends libc6 (>= 2.27), libcurl3t64-gnutls (>= 7.16.2), libglib2.0-0t64 (>= 2.12.0) N: C: libcarddav0: trimmed-field Description libcarddav - a carddav PIM clients library\n libcarddav provides a C interface for carddav PIM clients N: C: libcarddav0: trimmed-field Installed-Size 56 N: C: libcarddav0: trimmed-field Maintainer TDE Debian Team N: C: libcarddav0: trimmed-field Multi-Arch same N: C: libcarddav0: trimmed-field Package libcarddav0 N: C: libcarddav0: trimmed-field Priority optional N: C: libcarddav0: trimmed-field Provides libcarddav N: C: libcarddav0: trimmed-field Replaces libcarddav N: C: libcarddav0: trimmed-field Section libs N: C: libcarddav0: trimmed-field Source libcarddav N: C: libcarddav0: trimmed-field Version 4:14.1.6~pre2-0debian14.0.0+3~b N: C: libcarddav0-dbgsym: trimmed-field Architecture riscv64 N: C: libcarddav0-dbgsym: trimmed-field Auto-Built-Package debug-symbols N: C: libcarddav0-dbgsym: trimmed-field Build-Ids b7ee20404ce0ca5fb8d0baf5210ed2569e8ea45a N: C: libcarddav0-dbgsym: trimmed-field Depends libcarddav0 (= 4:14.1.6~pre2-0debian14.0.0+3~b) N: C: libcarddav0-dbgsym: trimmed-field Description debug symbols for libcarddav0 N: C: libcarddav0-dbgsym: trimmed-field Installed-Size 93 N: C: libcarddav0-dbgsym: trimmed-field Maintainer TDE Debian Team N: C: libcarddav0-dbgsym: trimmed-field Multi-Arch same N: C: libcarddav0-dbgsym: trimmed-field Package libcarddav0-dbgsym N: C: libcarddav0-dbgsym: trimmed-field Priority optional N: C: libcarddav0-dbgsym: trimmed-field Section debug N: C: libcarddav0-dbgsym: trimmed-field Source libcarddav N: C: libcarddav0-dbgsym: trimmed-field Version 4:14.1.6~pre2-0debian14.0.0+3~b N: O: libcarddav source: binary-nmu-debian-revision-in-source 4:14.1.6~pre2-0debian14.0.0+3~b N: N: The version number of your source package ends in +b and a number or has a N: Debian revision containing three parts. These version numbers are used by N: binary NMUs and should not be used as the source version. (The +b form is N: the current standard; the three-part version number now obsolete.) N: N: Please refer to Recompilation or binary-only NMU (Section 5.10.2.1) in the N: Debian Developer's Reference for details. N: N: Visibility: warning N: Show-Always: no N: Check: fields/version N: N: N: We want XZ regardless of the default compression. O: libcarddav source: custom-compression-in-debian-source-options compression = "xz" [debian/source/options:2] N: N: This package selects a custom compression level or algorithm in N: debian/source/options. Please remove the call and let dpkg-deb(1) select N: suitable defaults. N: N: Custom compression settings are usually chosen for one of two reasons: N: N: Higher compression levels or more advanced algorithms shrink the sizes of N: large files, but they can cause problems in the resource constrained N: environments used in Debian's buildd infrastructure. For example, higher N: than expected memory consumption may trigger an FTBFS or a failure to N: install. N: N: Lower compression levels or less advanced algorithms are sometimes needed N: to support older Debian version. Unfortunately, they also make it harder N: to change the defaults on an archive-wide basis. N: N: Some legitimate use cases trigger this tag. Please override it. N: N: Please refer to Bug#829100, Bug#906614, Bug#909696, and the dpkg-deb(1) N: manual page for details. N: N: Visibility: warning N: Show-Always: no N: Check: debian/source-dir N: Renamed from: debian-source-options-has-custom-compression-settings N: N: N: We want XZ regardless of the default compression. O: libcarddav source: custom-compression-in-debian-source-options compression-level = 9 [debian/source/options:3] N: O: libcarddav source: no-nmu-in-changelog [debian/changelog:1] N: N: When you NMU a package, that fact should be mentioned on the first line in N: the changelog entry. Use the words "NMU" or "Non-maintainer upload" (case N: insensitive). N: N: Maybe you didn't intend this upload to be a NMU, in that case, please N: double-check that the most recent entry in the changelog is byte-for-byte N: identical to the maintainer or one of the uploaders. If this is a local N: package (not intended for Debian), you can suppress this warning by N: putting "local" in the version number or "local package" on the first line N: of the changelog entry. N: N: Please refer to Using the DELAYED/ queue (Section 5.11.3) in the Debian N: Developer's Reference for details. N: N: Visibility: warning N: Show-Always: no N: Check: nmu N: Renamed from: changelog-should-mention-nmu N: N: N: We build for many distribution versions and therefore need the N: distribution version as part of the package version, which is N: unintentionally understood as NMU. O: libcarddav source: source-nmu-has-incorrect-version-number 4:14.1.6~pre2-0debian14.0.0+3~b [debian/changelog:1] N: N: A source NMU should have a Debian revision of "-x.x" (or "+nmuX" for a N: native package). This is to prevent stealing version numbers from the N: maintainer. N: N: Maybe you didn't intend this upload to be a NMU, in that case, please N: double-check that the most recent entry in the changelog is byte-for-byte N: identical to the maintainer or one of the uploaders. If this is a local N: package (not intended for Debian), you can suppress this warning by N: putting "local" in the version number or "local package" on the first line N: of the changelog entry. N: N: Please refer to NMUs and debian/changelog (Section 5.11.2) in the Debian N: Developer's Reference for details. N: N: Visibility: warning N: Show-Always: no N: Check: nmu N: --------------------