Main Inclusion Report for sourcepackage

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/o/openct, available for all supported architectures

2. Rationale:

   • Build dependency of gnupg2

3. Security:

   • No CVE entries.

   • No Secunia history.

   • No binaries running as root or suid/sgid.
   • Does not open any port.

4. Quality assurance:

   • Package works out of the box without configuration.
   • Package does not ask any debconf questions higher than priority 'normal'.

   • No showstopper Debian bugs.

   • Good maintenance in Debian.

   • Active upstream.

   • No critical bugs in upstream bug tracker

   • Deals with special hardware which is nontrivial to support (smart card readers).

5. Standards compliance:

   • Meets the FHS, Debian Policy

   • Meets Debian library packaging guide standards.

   • Standard cdbs packaging, standard patch system.

6. Dependencies:

   • All in main.

Reviewers

MartinPitt: I'm not really happy with this package, as long as we do not have a maintainer with the required hardware. Also, gnupg does not depend on any smart card library at all; can it be built without that stuff?