Dear William, I need to clarify the version-specific requirement underlying this ITP filing.
VERSION DEPENDENCY CHAIN: FOSSology requires php-psr-http-message version 1.0.1, which is part of maintaining compatibility across its entire HTTP dependency stack with Slim Framework 3.x and related components. DEPENDENCY CHAIN COMPATIBILITY: The core issue is preserving FOSSology's integrated HTTP stack: - FOSSology uses Slim Framework 3.12.3 - Slim 3.x was built against PSR-HTTP-Message 1.0.1 interfaces - FOSSology's HTTP handling components expect PSR-7 1.0.1 behavior - Newer PSR-HTTP-Message versions may have subtle interface changes incompatible with Slim 3.x TECHNICAL INTEGRATION REQUIREMENTS: FOSSology's web components rely on: - Specific PSR-7 message interface implementations from 1.0.1 - HTTP request/response handling patterns compatible with Slim 3.x - Integration with FOSSology's existing HTTP processing code - Consistency across the PSR-7/PSR-17 interface chain EVIDENCE FROM TESTING: FOSSology's composer dependencies specifically lock PSR-HTTP-Message to 1.0.1 because: - It ensures compatibility with Slim 3.x HTTP handling - Prevents interface mismatches in the HTTP message chain - Maintains stability in FOSSology's web API components REAL-WORLD DEPENDENCY REQUIREMENT: This version constraint is essential for: - Slim 3.x route handling and middleware processing - FOSSology's HTTP request/response pipeline - Web API functionality and HTTP message creation - Integration between PSR-7 interfaces and Slim 3.x framework PROPOSED SOLUTION: Package as php-psr-http-message-1.0 to provide the version FOSSology's HTTP stack requires, following Debian's approach for version-specific dependencies. JUSTIFICATION: This maintains the complete FOSSology HTTP infrastructure (Slim 3.x + PSR-HTTP-Message 1.0.1) without forcing architectural changes that would require extensive upstream development. REQUEST: Could we reopen this ITP to discuss providing PSR-HTTP-Message 1.0.1 for FOSSology's dependency chain compatibility? Best regards, Ahmed Gamal FOSSology Debian Packaging Team Technical reference: https://www.php-fig.org/psr/psr-7/ On Sun, Aug 10, 2025 at 2:03 PM Debian Bug Tracking System < [email protected]> wrote: > Your message dated Sun, 10 Aug 2025 15:45:06 +0200 > with message-id <[email protected]> > and subject line The package already exists in Debian > has caused the Debian Bug report #1109625, > regarding ITP: php-psr-http-message -- Common interface for HTTP messages > to be marked as done. > > This means that you claim that the problem has been dealt with. > If this is not the case it is now your responsibility to reopen the > Bug report if necessary, and/or fix the problem forthwith. > > (NB: If you are a system administrator and have no idea what this > message is talking about, this may indicate a serious mail system > misconfiguration somewhere. Please contact [email protected] > immediately.) > > > -- > 1109625: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109625 > Debian Bug Tracking System > Contact [email protected] with problems > > > > ---------- Forwarded message ---------- > From: Ahmed Gamal <[email protected]> > To: Debian Bug Tracking System <[email protected]> > Cc: > Bcc: > Date: Mon, 21 Jul 2025 04:44:47 +0000 > Subject: ITP: php-psr-http-message -- Common interface for HTTP messages > Package: wnpp > Severity: wishlist > Owner: Ahmed Gamal <[email protected]> > > * Package name : php-psr-http-message > Version : 1.0.1 > Upstream Author : PHP-FIG <http://www.php-fig.org/> > * URL : https://github.com/php-fig/http-message > * License : MIT > Programming Lang: PHP > Section : php > > Description: > Common interface for HTTP messages > > This package provides common interfaces for HTTP messages as defined by > PSR-7 > (HTTP Message Interface). It is part of the PHP Standards Recommendations > (PSR) for HTTP message interfaces. > > The package contains the standard interfaces for HTTP requests, responses, > server requests, streams, and uploaded files, ensuring interoperability > between different HTTP message implementations and providing a common > foundation for HTTP handling in PHP applications. > > Rationale: > This package is required as a dependency for FOSSology, an open source > license > compliance system. FOSSology uses PHP-based tools for source code > analysis and > license detection, which need standardized HTTP message interfaces for > handling HTTP requests and responses in web-based components. > > The php-psr-http-message package is essential for: > - Providing standardized HTTP message interfaces for FOSSology components > - Ensuring interoperability with PSR-7 compliant HTTP libraries > - Supporting web-based tools in FOSSology that handle HTTP requests > - Maintaining compatibility with modern PHP HTTP standards > - Enabling consistent HTTP message handling across different > implementations > - Supporting the PSR-7 specification for HTTP message interfaces > > Technical Details: > - Requires PHP >= 5.3.0 > - Implements PSR-7 HTTP Message Interface specification > - Uses PSR-4 autoloading > - Provides interfaces for all PSR-7 message types > - MIT licensed for maximum compatibility > - Part of the PHP-FIG standards recommendations > - Foundation for PSR-17 HTTP Factory interfaces > > Dependencies: > - php (>= 5.3.0) > - Build dependencies: phpunit, php-codesniffer > > The package will be maintained by Ahmed Gamal <[email protected]> > as part > of the FOSSology packaging effort. > > -- > Ahmed Gamal > FOSSology Debian Packaging Team > > > > ---------- Forwarded message ---------- > From: William Desportes <[email protected]> > To: 1109364-done <[email protected]>, 1109365-done < > [email protected]>, 1109613-done <[email protected]>, > 1109615-done <[email protected]>, 1109621-done < > [email protected]>, 1109624-done <[email protected]>, > 1109625-done <[email protected]>, 1109632-done < > [email protected]>, 1109633-done <[email protected]>, > 1109634-done <[email protected]>, 1109640-done < > [email protected]> > Cc: > Bcc: > Date: Sun, 10 Aug 2025 15:45:06 +0200 > Subject: The package already exists in Debian > > Please do some research before opening ITP/RFP bugs. > This package already exists in Debian. > > -- > William Desportes
