spdx-spec icon indicating copy to clipboard operation
spdx-spec copied to clipboard

Relationship between a Debian source and binary package

Open Urist-McGit opened this issue 10 months ago • 1 comments

In the Debian ecosystem each binary package references a source package from which it is built. To quote from the documentation:

Source packages provide you with all of the necessary files to compile or otherwise, build the desired piece of software.

It consists, in its simplest form, of three files:

    The upstream tarball with .tar.gz ending

    A description file with .[dsc](https://wiki.debian.org/dsc) ending. It contains the name of the package, both, in its filename as well as content (after the Source: keyword).
    A tarball, with any changes made to upstream source, plus all the files created for the Debian package.

        This has a .debian.tar.gz (source format : 3.0)

        or a .diff.gz ending (source format : 1.0)

We are unsure how to exactly represent the relationship between these two packages. Candidates would e.g. be GENERATES, PREREQUESITE_FOR. Is there already a consensus what is best? What would you recommend?

Urist-McGit avatar Feb 18 '25 08:02 Urist-McGit

My suggestion would be GENERATES if the binary package is created from the source files.

goneall avatar Feb 25 '25 20:02 goneall

@Urist-McGit - Does the suggestion work for you? If so, OK to close?

goneall avatar Nov 14 '25 22:11 goneall

Yes, we use GENERATES now.

Urist-McGit avatar Nov 17 '25 07:11 Urist-McGit