Main Inclusion Report for xapian-core

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/x/xapian-core available for all supported architectures

2. Rationale:

   • libept

3. Security:

   • No CVE entries

   • No Secunia history:

   • No binaries running as root or suid/sgid, No daemons
   • Network activity: does not open any port. Does not handle incoming network data.
   • No known source code review performed

4. Quality assurance:

   • Package always works out of the box without configuration
   • Package does not ask debconf questions

   • Debian bugs: None open

   • Maintenance in Debian is slow

   • Upstream is active

   • Upstream bug tracker: nothing serious

   • Hardware: Does not deal with hardware

5. Standards compliance:

   • FHS, Debian Policy compliant

   • Debian library packaging guide standards compliant

   • Packaging system debhelper

6. Dependencies:

   • only autotools
   • All dependencies in main

7. Background information:

   • The general purpose and context of the package is clear from the package's debian/control file
   • Upstream call it xapian-core

Reviewers

MartinPitt: looks good, but I would welcome a quick security review from Kees for this, since search engines are particularly prone to vulnerabilities