exiv2 -- gdk-pixbuf -- jackson-databind -- libidn -- libidn2-0 -- libraw -- nss -- opencv -- openexr -- pngcrush -- rtpproxy -- unrar-free -- mercurial/stable -- chromium-browser/oldstable -- php-horde-crypt/oldstable -- ruby2.1/oldstable -- wordpress/oldstable -- ------ The above is a list of DSA candidates based on the tracker's information. One should evaluate the candidates and either add them to dsa-needed.txt or consider tagging them no-dsa.