Bug 2119241 - Review Request: rust-nanorand - Tiny, fast, zero-dep library for random number generation
Summary: Review Request: rust-nanorand - Tiny, fast, zero-dep library for random numbe...
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Fabio Valentini
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2119245
TreeView+ depends on / blocked
 
Reported: 2022-08-18 03:37 UTC by Orion Poplawski
Modified: 2022-08-30 01:47 UTC (History)
2 users (show)

Fixed In Version: rust-nanorand-0.7.0-1.fc38
Clone Of:
Environment:
Last Closed: 2022-08-30 01:47:06 UTC
Type: Bug
Embargoed:
decathorpe: fedora-review+


Attachments (Terms of Use)

Description Orion Poplawski 2022-08-18 03:37:04 UTC
Spec URL: https://orion.fedorapeople.org/rust-nanorand.spec
SRPM URL: https://orion.fedorapeople.org/rust-nanorand-0.7.0-1.fc38.src.rpm
Description:
Tiny, fast, zero-dep library for random number generation.

Fedora Account System Username: orion

Comment 1 Orion Poplawski 2022-08-18 03:45:33 UTC
So, I patched the deps in the following manner:

 [dependencies.getrandom]
 version = "0.2.5"
-features = ["rdrand", "js"]
+features = ["rdrand"]

because the current getrandom package does not provide the "js" feature.  I have no idea if this is okay to do.

Comment 2 Fabio Valentini 2022-08-18 10:02:48 UTC
Yes, this is entirely OK - getrandom's "js" feature is intended for WebAssembly environments and has additional dependencies.
Since we don't compile to WebAssembly, removing this feature is OK, and indeed, desirable (to prune unnecessary dependencies from the dep tree).

Comment 3 Fabio Valentini 2022-08-18 10:12:48 UTC
Package was generated with rust2rpm, simplifying the review.

- package builds and installs without errors on rawhide
- test suite is run and all unit tests pass
- latest version of the crate is packaged
- license matches upstream specification (Zlib) and is acceptable for Fedora
- license file is included with %license in %files
- package complies with Rust Packaging Guidelines

Package APPROVED.

===

Recommended post-import rust-sig tasks:

- add @rust-sig with "commit" access as package co-maintainer

- set bugzilla assignee overrides to @rust-sig (optional)

- set up package on release-monitoring.org:
  project: $crate
  homepage: https://crates.io/crates/$crate
  backend: crates.io
  version scheme: semantic
  version filter: alpha;beta;rc;pre
  distro: Fedora
  Package: rust-$crate

- track package in koschei for all built branches

===

Two nit-picks:

1) Add a comment below "# Manually created patch for downstream crate metadata changes" that explains what you did, something like
# * remove WASM-specific "js" feature from the getrandom dependency

2) Exclude some upstream-development-only files from getting installed, i.e. add this line below "resolver = 2" in Cargo.toml:

exclude = ["/deny.toml", "/enforce-conventional-commits.py", "/README.tpl"]

and add a comment about it, something like
# * prevent some files that are only useful for upstream development from getting installed

Comment 4 Jens Petersen 2022-08-28 05:36:58 UTC
(fedscm-admin):  The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-nanorand

Comment 5 Orion Poplawski 2022-08-30 01:47:06 UTC
Built.  Thanks all.


Note You need to log in before you can comment on or make changes to this bug.