https://bugzilla.redhat.com/show_bug.cgi?id=2435758
--- Comment #12 from Fabio Valentini <[email protected]> --- Sorry for the delay - initial review comments: 1. If "git" is only needed for tests (could it be just "git-core"?), then please conditionalize it under %if %{with check}". 2. The "Recommends: cascadia-code-nf-fonts" is attached to no package. You will need to move it under "%package %{crate}", otherwise it has zero effect. 3. The format / syntax in the License tag is incorrect. Clauses that are joined by "OR" need to be parenthesized when in a larger "AND"ed list. 4. Inconsistent use of macros / mixing of templates. It looks like you're mixing concepts from rust2rpm-generated spec file with the spec file template for "non-crate" Rust packages. Do one, or the other, but don't mix. For example, you replaced `%cargo_install" with a manuall "install" call, but left "%global cargo_install_lib 0" present, which has no effect when not using "%cargo_install". 5. The folder where you install the elvish shell completions is unowned. Not even the "elvish" package owns /usr/share/elvish or /usr/share/elvish/lib, so the package will need to (co)own both directories (listing them as %dir). There don't appear to be *any* packages in Fedora that ship completions for elvish, so you could just drop them entirely. 6. There's a bunch of vendored dependencies that are "CC0-1.0" licensed - these are not appropriate for Fedora. For crates where CC0-1.0 is an OR *option*, you'd need to drop "CC0-1.0" from the options. For crates where "CC0-1.0" is the *only* offered license, you'd need to either drop them, or ask for exceptions on the "legal" mailing list (these might be granted if the crates are already packaged for Fedora). 7. There's a some test data in vendored crates that I'm not sure whether they're redistributable or not. For exmaple, jsonc-parser/benches/data/citm_catalog.json looks like a "real" dataset, but there's no documentation for what it's from or under the terms of which license the data is made available. 8. Some vendored dependencies have incomplete license information. For example, the regex* crates include Unicode data / tables when using the "default" or any "unicode-*" features, which are covered by the "Unicode-DFS-2016" license (see rust-regex-syntax package in Fedora). Looks like this is the case here, so your package also contains data / code derived from Unicode-DFS-2016 licensed content. Conversely, the tzdb_data crate claims to be licensed "MIT-0 OR MIT OR Apache-2.0", but only includes an "MIT" license text - but the Apache-2.0 license requires that the license text is included in redistributed sources. It would be good to contact the tzdb* crate author about clarifying the license terms and / or including the missing license texts. ================================================================================ It looks like the number of "missing" dependencies in Fedora is actually relatively small (after relaxing some version ranges to adapt to what's already available in Fedora). It would be preferable to not vendor dependencies in this case (it would also make it unnecessary to adapt / patch / deal with issues in vendored dependencies): - guess_host_triple - jsonc-parser - process_control (retired) - starship-battery (retired) - versions (retired) All other "missing" dependencies are just (small) version mismatches, as far as I can tell. The Rust SIG can help getting the missing pieces into Fedora for building without vendored dependencies. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2435758 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202435758%23c12 -- _______________________________________________ package-review mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
