Re: ITP: signxml -- Python library for the W3C XSML signature standard

[Guillem Jover <guillem@debian.org>]

Hi!

On Sun, 2024-09-29 at 04:46:33 +0800, Ying-Chun Liu (PaulLiu) wrote:
> Package: wnpp
> X-Debbugs-Cc: debian-devel@lists.debian.org
> Owner: "Ying-Chun Liu (PaulLiu)" <paulliu@debian.org>
> X-Debbugs-Cc: paulliu@debian.org
> Severity: wishlist

[ BTW if you add two X-Debbugs-Cc, the latter seem to override the
  former, so this never reached d-d AFAICT. You can use instead a
  comma-separated list on the same header. ]

> * Package name    : signxml
>   Version         : 4.0.2
> * URL             : https://github.com/XML-Security/signxml
> * License         : Apache-2.0
>   Programming Lang: Python
>   Description     : Python library for the W3C XSML signature standard (Python 3)
>  SignXML is an implementation of the W3C XML Signature standard in Python.
>  This standard (also known as "XMLDSig") is used to provide payload secuty
>  in SAML 2.0, XAdES, and WS-Security, among other uses. The standard is
>  defined in the W3C Recommendation XML Signature Syntax and Processing Version
>  1.1. SignXML implements all of the required components of the Version 1.1
>  standard, and most recommended ones.
> 
> This package is a dependency for openleadr-python.

This seems to be a python module only package, but its source package
name is not currently namespaced. Given that it has not yet passed NEW,
please namespace it with python- to avoid taking on the global namespace,
so that we do not "prevent" packaging something that for example installs
a command with the same name (or having to end up using a non-obvious one
for that, or requiring a future rename), so that it's easier to see what
it is about when doing archive-wide analysis from Sources, or dd-lists,
or even reading changelogs via stuff like apt-listchanges, like the rest
of the language specific teams are doing. :)

Thanks,
Guillem