Bug 2486071 - Review Request: rust-blurhash - Pure Rust implementation of blurhash
Summary: Review Request: rust-blurhash - Pure Rust implementation of blurhash
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: FE-Legal
TreeView+ depends on / blocked
 
Reported: 2026-06-07 11:28 UTC by Dominik 'Rathann' Mierzejewski
Modified: 2026-06-14 18:34 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Dominik 'Rathann' Mierzejewski 2026-06-07 11:28:04 UTC
Spec URL: https://rathann.fedorapeople.org/review/rust-blurhash/rust-blurhash.spec
SRPM URL: https://rathann.fedorapeople.org/review/rust-blurhash/rust-blurhash-0.2.3-1.fc45.src.rpm
Description:
Blurhash is an algorithm written by Dag Ågren for Wolt (woltapp/blurhash) that encodes an image into a short (~20-30 byte) ASCII string. When you decode the string back into an image, you get a gradient of colors that represent the original image. This can be useful for scenarios where you want an image placeholder before loading, or even to censor the contents of an image a la Mastodon.

Fedora Account System Username: rathann

Comment 1 Ben Beasley 2026-06-14 18:34:26 UTC
Unfortunately, the data/ subdirectory contains images that are not acceptably licensed for distribution in Fedora.

- The GitHub “octocat” logo, octocat.png/octocat_blurred.png, is subject to a restrictive proprietary license: https://brand.github.com/foundations/logo
- The SIPI “jelly beans” image, SIPI_Jelly_Beans.tiff, has unknown original provenance and copyright ownership: https://sipi.usc.edu/database/database.php

The Wikipedia logo, wikipedia_logo.png/wikipedia_logo_blurred.png, could be OK because it is CC-BY-SA-3.0, https://en.wikipedia.org/wiki/Wikipedia_logo. If this file is retained, its license should be documented in the spec file.

I think that you will need to produce a modified version of the crate archive without the data/ directory (or at least without the images with problematic license status) to use as the source, in order to avoid uploading these images to the lookaside cache and distributing them in the source RPMs, and will need to patch out or disable any tests that use the image data. See https://src.fedoraproject.org/rpms/rust-fiat-crypto/tree/426eb67ee434e9563467e17fecf20892ff6e9b1c for an example of a package that has to filter files out of the crate archive.


Note You need to log in before you can comment on or make changes to this bug.