metadata: add debian package inspector
Metadata
Current evaluation
Merged PR #10 added a basic metadata inspector for Debian packages, extracting details including name, version, vendor, author, and integrity hashes.
Resolution: closed resolved
Reason: PR #10 was approved and merged as commit 2e30ac1, introducing the Debian package metadata extractor.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Basic metadata extractor for .deb packages. Better heuristics to
determine author/author email and license is needed.
Extracted metadata example:
```
{
"metadata-version": "0.1",
"type": "application/vnd.debian.binary-package",
"sha1": "f3f337867d45740176b8fd7133aa137ac2f9a6c5",
"sha256": "0c3033fda14c31324a98bffb469d128e90a384aaedf22580ab39f20a3c407c94",
"size": 12696,
"name": "toilet",
"version": "0.3-1.4",
"vendor": "Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e",
"description": "Display large colourful characters in text mode",
"author": "Sam Hocevar \u003csam@zoy.org\u003e",
"architecture": "amd64",
"license": "",
"annotations": {
"deb.debian-binary.version": {
"time": "2023-07-12T15:33:40.208941533Z",
"kind": "notice",
"origin": "metadata.debInspector",
"value": "2.0"
},
"file.integrity.asserted-by": {
"time": "2023-07-12T15:33:40.215181815Z",
"kind": "notice",
"origin": "metadata.debInspector",
"value": "48f33706c3a3711801af4d1910f5e44722260458"
}
},
"downloads": [
{
...
}
]
}
```
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
CRAFT-1817
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #10 added a basic metadata inspector for Debian packages, extracting details including name, version, vendor, author, and integrity hashes. | |
| qwen/qwen3.6-35b-a3b | — | closed resolved | Merged PR adding a basic metadata extractor for .deb packages, capturing fields like name, version, vendor, author, and integrity hashes. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #61 inspectors: add apt and deb file inspectors | fetch-service | merged | Merged PR #61 in commit 566f57c, adding stateful APT and DEB inspectors to validate signed InRelease files, Packages.xz indexes, and .deb packages. |