Bug 2356145 - Review Request: perl-Crypt-URandom-Token - Generate secure strings for passwords, secrets and similar
Summary: Review Request: perl-Crypt-URandom-Token - Generate secure strings for passwo...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Michal Josef Spacek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2354882
TreeView+ depends on / blocked
 
Reported: 2025-03-31 06:17 UTC by Jitka Plesnikova
Modified: 2025-04-03 13:34 UTC (History)
2 users (show)

Fixed In Version: perl-Crypt-URandom-Token-0.003-1.fc43
Clone Of:
Environment:
Last Closed: 2025-04-03 13:34:33 UTC
Type: ---
Embargoed:
mspacek: fedora-review+


Attachments (Terms of Use)

Description Jitka Plesnikova 2025-03-31 06:17:07 UTC
Spec URL: https://jplesnik.fedorapeople.org/perl-Crypt-URandom-Token/perl-Crypt-URandom-Token.spec
SRPM URL: https://jplesnik.fedorapeople.org/perl-Crypt-URandom-Token/perl-Crypt-URandom-Token-0.003-1.fc43.noarch.rpm
Description:
This module provides a secure way to generate a random token for passwords
and similar using Crypt::URandom as the source of random bits.

Fedora Account System Username: jplesnik

Comment 1 Michal Josef Spacek 2025-04-02 12:23:22 UTC
@jplesnik 

Some nits
* The dependency on coreutils is not needed. Sure?
* There are two "NO_PACKLIST=1"
* Regarding the module versions and Perl version used. There are >>use v5.20;<<, >>"Crypt::URandom" => "0.40"<< and >>"Test::Exception" => "0.43"<<. Isn't it better to present them in the spec file? I understand that we don't hit this issue, but for common use, it could be better.

Comment 2 Jitka Plesnikova 2025-04-03 07:04:33 UTC
(In reply to Michal Josef Spacek from comment #1)
> @jplesnik 
> 
> Some nits
> * The dependency on coreutils is not needed. Sure?
It is required for %{_fixperms}, it uses 'chmod'.

> * There are two "NO_PACKLIST=1"
Good catch, I missed it.

> * Regarding the module versions and Perl version used. There are >>use
> v5.20;<<, >>"Crypt::URandom" => "0.40"<< and >>"Test::Exception" =>
> "0.43"<<. Isn't it better to present them in the spec file? I understand
> that we don't hit this issue, but for common use, it could be better.
I added the version constrain. 

Updated files are on the same link

Comment 3 Michal Josef Spacek 2025-04-03 07:42:16 UTC
Source file is not present, but I think that's ok
Summary is ok
License is ok
Description is ok
URL and Source0 are ok
All tests passed
BuildRequires are ok

$ rpm -qp --requires perl-Crypt-URandom-Token-0.003-1.fc43.noarch.rpm | sort | uniq -c | grep -v rpmlib
      1 perl(Carp)
      1 perl(Crypt::URandom) >= 0.40
      1 perl(Exporter)
      1 perl-libs
      1 perl(strict)
      1 perl(:VERSION) >= 5.20.0
      1 perl(warnings)
Binary requires are Ok.

$ rpm -qp --provides perl-Crypt-URandom-Token-0.003-1.fc43.noarch.rpm | sort | uniq -c
      1 perl(Crypt::URandom::Token)
      1 perl-Crypt-URandom-Token = 0.003-1.fc43
Binary provides are Ok.

$ rpmlint ./perl-Crypt-URandom-Token*
2 packages and 1 specfiles checked; 0 errors, 0 warnings, 8 filtered, 0 badness; has taken 0.2 s
Rpmlint is ok

The package is in line with Fedora and Perl packaging guide lines.

Resolution:
Approved

Comment 4 Fedora Admin user for bugzilla script actions 2025-04-03 08:58:38 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/perl-Crypt-URandom-Token

Comment 5 Jitka Plesnikova 2025-04-03 13:34:33 UTC
Thank you for review.


Note You need to log in before you can comment on or make changes to this bug.