[Bug 1953173] [NEW] [MIR] python-asgiref

Launchpad Bug Tracker 1953173 at bugs.launchpad.net
Tue Mar 8 16:45:52 UTC 2022


You have been subscribed to a public bug by Christian Ehrhardt  (paelzer):

Related bug is bug 1951130 which wasn't needed because python-asgiref an
optional dependency for flask. However it looks like it's a required
dependency of python-django 3.2.

[Availability]
The package python-asgiref is already in Ubuntu universe.
The package python-asgiref builds for the architectures it is designed to work on.
It currently builds and works for architectures: all
Link to package https://launchpad.net/ubuntu/+source/python-asgiref

[Rationale]
- The package python-asgiref is required in Ubuntu main for newer versions of python-django.
- The package python-asgiref will generally be useful for a large part of our user base, 
  specifically those who work with Django and async-capable Python web servers, frameworks,
  and applications.
- The package python-asgiref is a new runtime dependency of package python-django that we already support.

[Security]
- No CVEs/security issues in this software in the past

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software
  (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many
  and long term critical bugs open
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/python-asgiref/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=python-asgiref

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails
  it makes the build fail, link to build log 
  https://launchpadlibrarian.net/564542850/buildlog_ubuntu-jammy-amd64.python-asgiref_3.4.1-1_BUILDING.txt.gz

- The package runs an autopkgtest, and is currently passing on
  amd64, arm64, armhf, ppc64el, and s390x. Link to test logs
  https://autopkgtest.ubuntu.com/packages/python-asgiref

- The package does have not failing autopkgtests right now

[Quality assurance - packaging]
- debian/watch is present and works

- This package does not yield massive lintian Warnings, Errors
- Link to recent build log including a lintian run https://paste.ubuntu.com/p/WFGCy5cvGm/
- Lintian overrides are not present

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will not be installed by default


[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- Owning Team will be Ubuntu Server
- Team is not yet, but will subscribe to the package before promotion

- This does not use static builds
- This does not use vendored code

[Background information]
The Package description explains the package well
Upstream Name is asgiref
Link to upstream project https://github.com/django/asgiref
ASGI docs describe the package in more detail: https://asgi.readthedocs.io/en/latest/

** Affects: python-asgiref (Ubuntu)
     Importance: Critical
         Status: Fix Committed


** Tags: jammy
-- 
[MIR] python-asgiref
https://bugs.launchpad.net/bugs/1953173
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.



More information about the ubuntu-archive mailing list