analysis.json

analysis.json
1{"tags": [{"severity": "error", "package": "libkdcraw3-trinity", "tag": "dir-or-file-in-opt", "explanation": "Debian packages should not install into /opt, because it is reserved for\nadd-on software.\n\nPlease refer to /opt : Add-on application software packages (Section 3.13)\nin the Filesystem Hierarchy Standard for details.\n\nVisibility: error\nShow-Always: no\nCheck: files/hierarchy/standard", "comment": "", "note": "", "pointer": "opt/trinity/"}, {"severity": "error", "package": "libkdcraw3-trinity", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/"}, {"severity": "error", "package": "libkdcraw3-trinity", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/libkdcraw.so.4.0.3"}, {"severity": "error", "package": "libkdcraw3-trinity", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/libkdcraw.so.4"}, {"severity": "error", "package": "libkdcraw3-trinity", "tag": "embedded-library", "explanation": "The given ELF object appears to have been statically linked to a library.\nDoing this is strongly discouraged due to the extra work needed by the\nsecurity team to fix all the extra embedded copies or trigger the package\nrebuilds, as appropriate.\n\nIf the package uses a modified version of the given library it is highly\nrecommended to coordinate with the library's maintainer to include the\nchanges on the system version of the library.\n\nPlease refer to Embedded code copies (Section 4.13) in the Debian Policy\nManual for details.\n\nVisibility: error\nShow-Always: no\nCheck: libraries/embedded", "comment": "", "note": "libraw", "pointer": "opt/trinity/lib/libkdcraw.so.4.0.3"}, {"severity": "warning", "package": "libkdcraw3-trinity", "tag": "hardening-no-relro", "explanation": "This package provides an ELF binary that lacks the \"read-only relocation\"\nlink flag. This package was likely not built with the default Debian\ncompiler flags defined by dpkg-buildflags. If built using dpkg-buildflags\ndirectly, be sure to import LDFLAGS.\n\nPlease refer to https://wiki.debian.org/Hardening for details.\n\nVisibility: warning\nShow-Always: no\nCheck: binaries/hardening", "comment": "", "note": "", "pointer": "opt/trinity/lib/libkdcraw.so.4.0.3"}, {"severity": "warning", "package": "libkdcraw3-trinity", "tag": "package-has-unnecessary-activation-of-ldconfig-trigger", "explanation": "The package activates the ldconfig trigger even though no shared libraries\nare installed in a directory controlled by the dynamic library loader.\n\nNote this may be triggered by a bug in debhelper, that causes it to\nauto-generate an ldconfig trigger for packages that do not need it.\n\nPlease refer to ldconfig (Section 8.1.1) in the Debian Policy Manual and\nBug#204975 for details.\n\nVisibility: warning\nShow-Always: no\nCheck: libraries/shared/trigger/ldconfig", "comment": "", "note": "", "pointer": ""}, {"severity": "warning", "package": "libkdcraw3-trinity", "tag": "package-relation-with-self", "explanation": "The package declares a relationship with itself. This is not very useful\nexcept in the case of a package Conflicting with itself if its package\nname doubles as a virtual package.\n\nVisibility: warning\nShow-Always: no\nCheck: fields/package-relations", "comment": "", "note": "Breaks: libkdcraw3-trinity (<< 4:14.0.0~)", "pointer": ""}, {"severity": "info", "package": "libkdcraw3-trinity", "tag": "hardening-no-bindnow", "explanation": "This package provides an ELF binary that lacks the \"bindnow\" linker flag.\n\nThis is needed (together with \"relro\") to make the \"Global Offset Table\"\n(GOT) fully read-only. The bindnow feature trades startup time for\nimproved security. Please consider enabling this feature or consider\noverriding the tag (possibly with a comment about why).\n\nIf you use dpkg-buildflags, you may have to add hardening=+bindnow or\nhardening=+all to DEB_BUILD_MAINT_OPTIONS.\n\nThe relevant compiler flags are set in LDFLAGS.\n\nPlease refer to https://wiki.debian.org/Hardening for details.\n\nVisibility: info\nShow-Always: no\nCheck: binaries/hardening", "comment": "", "note": "", "pointer": "opt/trinity/lib/libkdcraw.so.4.0.3"}, {"severity": "info", "package": "libkdcraw3-trinity", "tag": "spelling-error-in-binary", "explanation": "Lintian found a spelling error in the given binary. Lintian has a list of\ncommon misspellings that it looks for. It does not have a dictionary like\na spelling checker does.\n\nIf the string containing the spelling error is translated with the help of\ngettext or a similar tool, please fix the error in the translations as\nwell as the English text to avoid making the translations fuzzy. With\ngettext, for example, this means you should also fix the spelling mistake\nin the corresponding msgids in the *.po files.\n\nYou can often find the word in the source code by running:\n\ngrep -rw <word> <source-tree>\n\nThis tag may produce false positives for words that contain non-ASCII\ncharacters due to limitations in strings.\n\nVisibility: info\nShow-Always: no\nCheck: binaries/spelling", "comment": "", "note": "Optio Option", "pointer": "opt/trinity/lib/libkdcraw.so.4.0.3"}, {"severity": "pedantic", "package": "libkdcraw3-trinity", "tag": "copyright-refers-to-symlink-license", "explanation": "The copyright file refers to the versionless symlink in\n/usr/share/common-licenses for the full text of the GPL, LGPL, or GFDL\nlicense. This symlink is updated to point to the latest version of the\nlicense when a new one is released. The package appears to allow\nrelicensing under later versions of its license, so this is legally\nconsistent, but it implies that Debian will relicense the package under\nlater versions of those licenses as they're released. It is normally\nbetter to point to the version of the license the package references in\nits license statement.\n\nFor example, if the package says something like \"you may redistribute it\nand/or modify it under the terms of the GNU General Public License as\npublished by the Free Software Foundation; either version 2, or (at your\noption) any later version\", the debian/copyright file should refer to\n/usr/share/common-licenses/GPL-2, not /GPL.\n\nFor packages released under the same terms as Perl, Perl references the\nGPL version 1, so point to /usr/share/common-licenses/GPL-1.\n\nVisibility: pedantic\nShow-Always: no\nCheck: debian/copyright", "comment": "", "note": "usr/share/common-licenses/GPL", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "control-tarball-compression-format", "explanation": "This is the compressor format used for the control.tar tarball.\n\nVisibility: classification\nShow-Always: no\nCheck: deb-format\nThis tag is a classification. There is no issue in your package.", "comment": "", "note": "zst", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "data-tarball-compression-format", "explanation": "This is the compressor format used for the data.tar tarball.\n\nVisibility: classification\nShow-Always: no\nCheck: deb-format\nThis tag is a classification. There is no issue in your package.", "comment": "", "note": "zst", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "mail-contact", "explanation": "", "comment": "", "note": "Maintainer \"TDE Debian Team\" <team-debian@trinitydesktop.org>", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "no-ctrl-scripts", "explanation": "The package does not rely on any maintainer scripts (or other executable\ncontrol files).\n\nVisibility: classification\nShow-Always: no\nCheck: control-files\nThis tag is a classification. There is no issue in your package.", "comment": "", "note": "", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "package-is-maintained-by-individual", "explanation": "The package is maintained by an individual according to the\nmaintainer/uploaders fields in the debian/control file.\n\nVisibility: classification\nShow-Always: no\nCheck: fields/vcs\nThis tag is a classification. There is no issue in your package.", "comment": "", "note": "", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Architecture ppc64el", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Breaks libkdcraw3-kde3 (<< 4:14.0.0~), libkdcraw3-trinity (<< 4:14.0.0~)", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Depends libc6 (>= 2.38), libgcc-s1 (>= 3.3.1), libgomp1 (>= 6), liblcms2-2 (>= 2.2+git20110628), libstdc++6 (>= 5), libtqt3-mt (>= 4:14.2.0~pre257), tdelibs14-trinity (>= 4:14.2.0~pre291)", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Description Raw picture decoding C++ library (runtime)", "pointer": "Trinity"}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Homepage http://www.kipi-plugins.org/", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Installed-Size 615", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Maintainer TDE Debian Team <team-debian@trinitydesktop.org>", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Original-Maintainer Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org>", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Package libkdcraw3-trinity", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Priority optional", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Replaces libkdcraw3-kde3 (<< 4:14.0.0~), libkdcraw3-trinity (<< 4:14.0.0~)", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Section libs", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Source libkdcraw-trinity", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Version 4:14.2.0~pre27-0ubuntu24.10.0+9", "pointer": ""}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/dcrawinfocontainer.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/dcrawsettingswidget.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/kdcraw.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/libkdcraw_export.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/rawdecodingsettings.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/rawfiles.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/rcombobox.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/rnuminput.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/include/libkdcraw/version.h"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/libkdcraw.la"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/libkdcraw.so"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/pkgconfig/"}, {"severity": "error", "package": "libkdcraw3-trinity-dev", "tag": "dir-or-file-in-opt", "explanation": "", "comment": "", "note": "", "pointer": "opt/trinity/lib/pkgconfig/libkdcraw.pc"}, {"severity": "warning", "package": "libkdcraw3-trinity-dev", "tag": "package-has-unnecessary-activation-of-ldconfig-trigger", "explanation": "", "comment": "", "note": "", "pointer": ""}, {"severity": "warning", "package": "libkdcraw3-trinity-dev", "tag": "package-relation-with-self", "explanation": "", "comment": "", "note": "Breaks: libkdcraw3-trinity-dev (<< 4:14.0.0~)", "pointer": ""}, {"severity": "pedantic", "package": "libkdcraw3-trinity-dev", "tag": "copyright-refers-to-symlink-license", "explanation": "", "comment": "", "note": "usr/share/common-licenses/GPL", "pointer": ""}, {"severity": "experimental", "package": "libkdcraw3-trinity-dev", "tag": "package-contains-no-arch-dependent-files", "explanation": "All files in this package are architecture-independent, but the package is\nnot marked Architecture: all.\n\nThe package should probably be marked Architecture: all.\n\nPlease refer to Architecture (Section 5.6.8) in the Debian Policy Manual\nfor details.\n\nVisibility: info\nShow-Always: no\nCheck: files/architecture\nThis tag is experimental.", "comment": "", "note": "", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "control-tarball-compression-format", "explanation": "", "comment": "", "note": "zst", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "data-tarball-compression-format", "explanation": "", "comment": "", "note": "zst", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "mail-contact", "explanation": "", "comment": "", "note": "Maintainer \"TDE Debian Team\" <team-debian@trinitydesktop.org>", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "no-ctrl-scripts", "explanation": "", "comment": "", "note": "", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "package-is-maintained-by-individual", "explanation": "", "comment": "", "note": "", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Architecture ppc64el", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Breaks libkdcraw3-kde3-dev (<< 4:14.0.0~), libkdcraw3-trinity-dev (<< 4:14.0.0~)", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Conflicts libkdcraw-dev", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Depends libkdcraw3-trinity (= 4:14.2.0~pre27-0ubuntu24.10.0+9), liblcms2-dev, pkgconf", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Description RAW picture decoding C++ library (development)", "pointer": "Trinity"}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Homepage http://www.kipi-plugins.org/", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Installed-Size 86", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Maintainer TDE Debian Team <team-debian@trinitydesktop.org>", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Original-Maintainer Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org>", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Package libkdcraw3-trinity-dev", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Priority optional", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Replaces libkdcraw3-kde3-dev (<< 4:14.0.0~), libkdcraw3-trinity-dev (<< 4:14.0.0~)", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Section libdevel", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Source libkdcraw-trinity", "pointer": ""}, {"severity": "classification", "package": "libkdcraw3-trinity-dev", "tag": "trimmed-field", "explanation": "", "comment": "", "note": "Version 4:14.2.0~pre27-0ubuntu24.10.0+9", "pointer": ""}], "summary": {"tags_count_by_severity": {"error": 22, "warning": 5, "info": 2, "pedantic": 2, "experimental": 1, "overridden": 0, "classification": 39}, "package_filename": {"libkdcraw3-trinity": "libkdcraw3-trinity_14.2.0~pre27-0ubuntu24.10.0+9_ppc64el.deb", "libkdcraw3-trinity-dev": "libkdcraw3-trinity-dev_14.2.0~pre27-0ubuntu24.10.0+9_ppc64el.deb"}, "tags_found": ["control-tarball-compression-format", "copyright-refers-to-symlink-license", "data-tarball-compression-format", "dir-or-file-in-opt", "embedded-library", "hardening-no-bindnow", "hardening-no-relro", "mail-contact", "no-ctrl-scripts", "package-contains-no-arch-dependent-files", "package-has-unnecessary-activation-of-ldconfig-trigger", "package-is-maintained-by-individual", "package-relation-with-self", "spelling-error-in-binary", "trimmed-field"], "overridden_tags_found": [], "lintian_version": "2.118.0ubuntu1", "distribution": "debian:oracular"}, "version": 1}