Main Inclusion Report for chmlib

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/c/chmlib; available for all supported architectures

2. Rationale:

   • Build dependency of kdegraphics

3. Security:

   • CVE entries: quite a few vulnerabilities in the past

   • Secunia history: none

   • No binaries running as root
   • No network activity
   • Does handle structured data
   • No known source code review performed

4. Quality assurance:

   • Always works out the box
   • No debconf questions

   • Debian bugs: three

   • Maintenance in Debian is active

   • Upstream is calm

   • No known upstream bug tracker
   • Hardware: Does not deal with hardware
   • No test suite in the upstream source or packaging

5. Standards compliance:

   • FHS, Debian Policy compliant

   • Debian library packaging guide standards compliant

   • Packaging system debhelper, no patching

6. Dependencies:

   • nothing much
   • All in main

7. Background information:

   • The general purpose and context of the package is clear from the package's debian/control file.
   • Upstream call this software chmlib

Reviewers

MIR bug: https://bugs.launchpad.net/236113

JonathanRiddell