Dear William,

I need to clarify the version-specific requirement that led to this ITP
filing.

VERSION COMPATIBILITY REQUIREMENT:
FOSSology requires php-nikic-php-parser version 4.15.4, which may differ
from the version currently available in Debian. This is essential for
FOSSology's static code analysis and license detection capabilities.

STATIC ANALYSIS DEPENDENCY:
FOSSology's license compliance system relies on specific PHP-Parser
functionality:
- PHP code parsing for license detection algorithms
- Abstract syntax tree (AST) analysis for compliance scanning
- Integration with FOSSology's existing static analysis tools
- Compatibility with FOSSology's PHP code inspection workflows

TECHNICAL INTEGRATION REQUIREMENTS:
FOSSology's analysis components expect:
- Specific AST node structures from PHP-Parser 4.15.4
- Compatible parsing interfaces for PHP code analysis
- Consistent behavior in license detection algorithms
- Integration with FOSSology's existing PHP analysis pipeline

VERSION-SPECIFIC FUNCTIONALITY:
FOSSology's license detection relies on:
- Specific PHP-Parser API methods from version 4.15.4
- Particular AST traversal capabilities
- Compatible parsing output for license compliance algorithms
- Tested integration with FOSSology's code analysis tools

EVIDENCE FROM INTEGRATION:
FOSSology's composer dependencies specify PHP-Parser 4.15.4 to ensure:
- Stable license detection functionality
- Consistent static analysis results
- Compatibility with FOSSology's PHP inspection tools
- Reliable parsing for compliance workflows

PROPOSED SOLUTION:
Package as php-nikic-php-parser-4.15 if the current Debian version differs,
ensuring FOSSology can use the tested and validated parser version.

JUSTIFICATION:
FOSSology's license compliance accuracy depends on consistent PHP parsing
behavior, making version compatibility critical for reliable compliance
scanning.

REQUEST:
Please reopen to discuss providing PHP-Parser 4.15.4 for FOSSology's static
analysis requirements if version incompatibility exists.

Best regards,
Ahmed Gamal
FOSSology Debian Packaging Team

On Sun, Aug 10, 2025 at 2:03 PM Debian Bug Tracking System <
[email protected]> wrote:

> Your message dated Sun, 10 Aug 2025 15:45:06 +0200
> with message-id <[email protected]>
> and subject line The package already exists in Debian
> has caused the Debian Bug report #1109613,
> regarding ITP: php-nikic-php-parser -- PHP parser written in PHP for
> static code analysis
> to be marked as done.
>
> This means that you claim that the problem has been dealt with.
> If this is not the case it is now your responsibility to reopen the
> Bug report if necessary, and/or fix the problem forthwith.
>
> (NB: If you are a system administrator and have no idea what this
> message is talking about, this may indicate a serious mail system
> misconfiguration somewhere. Please contact [email protected]
> immediately.)
>
>
> --
> 1109613: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109613
> Debian Bug Tracking System
> Contact [email protected] with problems
>
>
>
> ---------- Forwarded message ----------
> From: Ahmed Gamal <[email protected]>
> To: Debian Bug Tracking System <[email protected]>
> Cc:
> Bcc:
> Date: Sun, 20 Jul 2025 20:31:00 +0000
> Subject: ITP: php-nikic-php-parser -- PHP parser written in PHP for static
> code analysis
> Package: wnpp
> Severity: wishlist
> Owner: Ahmed Gamal <[email protected]>
>
> * Package name    : php-nikic-php-parser
>   Version         : 4.15.4
>   Upstream Author : Nikita Popov <[email protected]>
> * URL             : https://github.com/nikic/PHP-Parser
> * License         : BSD-3-Clause
>   Programming Lang: PHP
>   Section         : php
>
> Description:
>  PHP parser written in PHP for static code analysis and manipulation
>
>  The PHP Parser is a PHP 5.2 to PHP 8.2 parser written in PHP. Its purpose
> is to
>  simplify static code analysis and manipulation of PHP code. The library
> provides
>  the following key features:
>
>  * Parsing PHP 5, PHP 7, and PHP 8 code into an abstract syntax tree (AST)
>  * Dumping the AST in human-readable form
>  * Converting an AST back to PHP code with formatting preservation
>  * Infrastructure to traverse and modify ASTs
>  * Resolution of namespaced names
>  * Evaluation of constant expressions
>  * Builders to simplify AST construction for code generation
>  * Converting an AST into JSON and back
>
>  This package is essential for PHP development tools, static analyzers,
> and code
>  transformation utilities.
>
> Rationale:
>  This package is required as a dependency for FOSSology, an open source
> license
>  compliance system. FOSSology uses PHP-based tools for source code
> analysis and
>  license detection, which rely on the PHP Parser library for parsing and
> analyzing
>  PHP source code during the compliance scanning process.
>
>  The PHP Parser is a critical component for:
>  - Static code analysis tools in FOSSology
>  - License detection algorithms that need to parse PHP code
>  - Code transformation utilities used in the compliance workflow
>  - Development tools that analyze PHP code structure
>
> Technical Details:
>  - Requires PHP >= 7.0
>  - Uses PSR-4 autoloading
>  - Provides command-line tool: bin/php-parse
>  - Minimal runtime dependencies (only ext-tokenizer)
>  - Comprehensive test suite included
>  - Well-documented with extensive examples
>
> Dependencies:
>  - php (>= 7.0)
>  - php-tokenizer
>  - Build dependencies: phpunit, ircmaxell/php-yacc (for development)
>
> The package will be maintained by Ahmed Gamal <[email protected]>
> as part
> of the FOSSology packaging effort.
>
> --
> Ahmed Gamal
> FOSSology Debian Packaging Team
>
>
>
> ---------- Forwarded message ----------
> From: William Desportes <[email protected]>
> To: 1109364-done <[email protected]>, 1109365-done <
> [email protected]>, 1109613-done <[email protected]>,
> 1109615-done <[email protected]>, 1109621-done <
> [email protected]>, 1109624-done <[email protected]>,
> 1109625-done <[email protected]>, 1109632-done <
> [email protected]>, 1109633-done <[email protected]>,
> 1109634-done <[email protected]>, 1109640-done <
> [email protected]>
> Cc:
> Bcc:
> Date: Sun, 10 Aug 2025 15:45:06 +0200
> Subject: The package already exists in Debian
>
> Please do some research before opening ITP/RFP bugs.
> This package already exists in Debian.
>
> --
> William Desportes

Reply via email to