Main Inclusion Report for avalon-framework

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/a/avalon-framework; available for all supported architectures.

2. Rationale:

   • Build-time dependency of libproxool-java, needed for eucalyptus 1.6.2

3. Security:

   • CVE entries: none

   • Secunia history: none

   • No binaries running as root or suid/sgid, no daemons.
   • No network activity, no direct binary processing.
   • No source code review performed.

4. Quality assurance:

   • Package is a Java library, works out of the box without configuration.
   • No debconf questions higher than priority 'medium'.

   • Debian bugs: none

   • Maintenance in Debian is vigorous.

   • Upstream is very calm.

   • Upstream bug tracker: No bugs.

   • Hardware: This package doesn't deal with hardware, runs inside a JVM.
   • There is a test suite in the upstream source, and it is enabled in debian packaging.

5. Standards compliance:

   • Package follows FHS, Debian Policy, and Java Debian and Ubuntu policies.

   • Package is using classic CDBS/ant packaging, as most Java libraries.

6. Dependencies:

   • All dependencies are in main already.

7. Maintenance:

   • Little maintenance is expected: this package has no bugs filed and is maintained by the debian-java team.
   • The debian-java team, including its few Ubuntu members, is responsible for monitoring the quality of this package and fixing its bugs.

8. Background information:

   • Package purpose is clear from its description.
   • Upstream still calls this software "Avalon Framework", though it's now part of the "Apache Excalibur" project.

Reviewers

MIR bug: https://launchpad.net/bugs/497390