Hi Simon,

Thank you again for offering to review and potentially sponsor the package.

The package is now ready for review:

   - mentors.debian.net: https://mentors.debian.net/package/python-slh-dsa/
   - Salsa: https://salsa.debian.org/colinxu/slhdsa

  I have also filed an RFS (#1144675) for the package.

There is currently a warning about debian/watch shown on mentors.debian.net.
I believe this is a false positive, as uscan --report-status completes
successfully and reports the expected upstream version.

I would be very grateful if you could review it when you have a chance.
Please let me know if there is anything I should change or improve.

Best regards,
Xu Colin

Simon Josefsson <[email protected]> 于2026年7月29日周三 23:08写道:

> I'm happy to review and potentially sponsor - please upload to
> mentors.d.net and send me a Salsa URL when you are ready for review.
>
> /Simon
>
> xu colin <[email protected]> writes:
>
> > Package: wnpp
> > Severity: wishlist
> > Owner: Xu Colin <[email protected]>
> > X-Debbugs-Cc: [email protected]
> >
> >    -
> >
> >    Package name : python-slh-dsa
> >    Version : 0.2.3
> >    Upstream Author : Xu Colin <[email protected]>
> >    -
> >
> >    URL : https://github.com/colinxu2020/slhdsa
> >    -
> >
> >    License : GNU Lesser General Public License Version 3
> >    Programming Lang: Python
> >    Description : Python implementation of the SLH-DSA signature scheme
> >
> > slh-dsa is a Python implementation of SLH-DSA, the stateless
> > hash-based digital signature algorithm standardized in FIPS 205.
> > It provides the public Python module "slhdsa" and supports Python 3.
> > The package has no third-party runtime dependencies.
> > .
> > Performance-sensitive modules can optionally be compiled into CPython
> > extension modules using mypyc. The upstream project uses setuptools as
> > its PEP 517 build backend and provides automated tests, continuous
> > integration, and binary-wheel builds through cibuildwheel.
> > .
> > The project has been actively maintained over the past three years,
> > with its most recent upstream commit approximately one month ago. It
> > currently receives approximately 150,000 downloads per month from
> > PyPI and is used as a direct dependency by trezor-firmware.
> > .
> > I intend to maintain this package in Debian. The proposed binary
> > package name is python3-slhdsa. I am not yet a Debian Developer and
> > will seek sponsorship for the initial upload.
>

Reply via email to