[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1109624: marked as done (ITP: php-psr-http-factory -- Common interfaces for PSR-7 HTTP message factories)



Dear William,

I need to clarify the version-specific requirement that led to this ITP filing.

VERSION DEPENDENCY ISSUE:
FOSSology requires php-psr-http-factory version 1.0.1, while current Debian may provide version 1.1.x or 2.x. This is part of a broader dependency chain compatibility issue with FOSSology's Slim 3.x and Symfony 3.4.x components.

DEPENDENCY CHAIN COMPATIBILITY:
The core issue is maintaining compatibility across FOSSology's HTTP stack:
- FOSSology uses Slim Framework 3.12.3
- Slim 3.x requires specific PSR-HTTP-Factory 1.0.x interfaces
- FOSSology's HTTP handling components expect PSR-17 1.0.x behavior
- Newer PSR-HTTP-Factory versions may have interface changes incompatible with Slim 3.x

TECHNICAL INTEGRATION REQUIREMENTS:
FOSSology's web components rely on:
- Specific PSR-17 factory interface implementations from 1.0.1
- HTTP message creation patterns compatible with Slim 3.x
- Integration with FOSSology's existing HTTP handling code
- Compatibility with FOSSology's PSR-7 message processing

EVIDENCE FROM INTEGRATION TESTING:
FOSSology's composer.json specifically locks PSR-HTTP-Factory to 1.0.1 because newer versions cause integration issues with its legacy Slim 3.x and Symfony 3.4.x dependency chain.

REAL-WORLD DEPENDENCY CONFLICTS:
When attempting to use newer PSR-HTTP-Factory versions with FOSSology:
- Slim 3.x factory usage patterns break
- HTTP message creation interfaces don't match expected signatures
- FOSSology's web routing and API components fail to initialize properly

PROPOSED SOLUTION:
Package as php-psr-http-factory-1.0 to provide the specific version FOSSology's dependency chain requires, alongside current Debian versions.

JUSTIFICATION:
This maintains the entire FOSSology HTTP stack integrity - Slim 3.x + PSR-HTTP-Factory 1.0.x + FOSSology's web components - without forcing major architectural changes upstream.

PRECEDENT:
Following Debian's approach for version-specific packages when applications have tightly coupled dependency requirements that cannot be easily updated independently.

REQUEST:
Could we reopen this ITP to discuss providing PSR-HTTP-Factory 1.0.1 for FOSSology's dependency chain compatibility?

Best regards,
Ahmed Gamal
FOSSology Debian Packaging Team

Technical reference: https://www.php-fig.org/psr/psr-17/

On Sun, Aug 10, 2025 at 2:03 PM Debian Bug Tracking System <owner@bugs.debian.org> wrote:
Your message dated Sun, 10 Aug 2025 15:45:06 +0200
with message-id <198943a261a.128607e99394474.6146403675296746199@wdes.fr>
and subject line The package already exists in Debian
has caused the Debian Bug report #1109624,
regarding ITP: php-psr-http-factory -- Common interfaces for PSR-7 HTTP message factories
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


--
1109624: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109624
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems



---------- Forwarded message ----------
From: Ahmed Gamal <ahmed.gamal9541@gmail.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Cc: 
Bcc: 
Date: Mon, 21 Jul 2025 04:37:45 +0000
Subject: ITP: php-psr-http-factory -- Common interfaces for PSR-7 HTTP message factories
Package: wnpp
Severity: wishlist
Owner: Ahmed Gamal <ahmed.gamal9541@gmail.com>

* Package name    : php-psr-http-factory
  Version         : 1.0.1
  Upstream Author : PHP-FIG <http://www.php-fig.org/>
* URL             : https://github.com/php-fig/http-factory
* License         : MIT
  Programming Lang: PHP
  Section         : php

Description:
 Common interfaces for PSR-7 HTTP message factories

 This package provides common interfaces for PSR-7 HTTP message factories as
 defined by PSR-17 (HTTP Message Factories). It is part of the PHP Standards
 Recommendations (PSR) for HTTP message interfaces.

 The package contains the standard interfaces for creating HTTP requests,
 responses, server requests, streams, uploaded files, and URIs, ensuring
 interoperability between different HTTP factory implementations.

Rationale:
 This package is required as a dependency for FOSSology, an open source license
 compliance system. FOSSology uses PHP-based tools for source code analysis and
 license detection, which need standardized HTTP message factory interfaces for
 handling HTTP requests and responses in web-based components.

 The php-psr-http-factory package is essential for:
 - Providing standardized HTTP factory interfaces for FOSSology components
 - Ensuring interoperability with PSR-17 compliant HTTP libraries
 - Supporting web-based tools in FOSSology that handle HTTP requests
 - Maintaining compatibility with modern PHP HTTP standards
 - Enabling consistent HTTP message creation across different implementations
 - Supporting the PSR-17 specification for HTTP message factories

Technical Details:
 - Requires PHP >= 7.0.0
 - Depends on psr/http-message (^1.0)
 - Implements PSR-17 HTTP Message Factories specification
 - Uses PSR-4 autoloading
 - Provides interfaces for all PSR-17 factory types
 - MIT licensed for maximum compatibility
 - Part of the PHP-FIG standards recommendations

Dependencies:
 - php (>= 7.0.0)
 - php-psr-http-message (>= 1.0)
 - Build dependencies: phpunit, php-codesniffer

The package will be maintained by Ahmed Gamal <ahmed.gamal9541@gmail.com> as part
of the FOSSology packaging effort.

--
Ahmed Gamal
FOSSology Debian Packaging Team



---------- Forwarded message ----------
From: William Desportes <williamdes@wdes.fr>
To: 1109364-done <1109364-done@bugs.debian.org>, 1109365-done <1109365-done@bugs.debian.org>, 1109613-done <1109613-done@bugs.debian.org>, 1109615-done <1109615-done@bugs.debian.org>, 1109621-done <1109621-done@bugs.debian.org>, 1109624-done <1109624-done@bugs.debian.org>, 1109625-done <1109625-done@bugs.debian.org>, 1109632-done <1109632-done@bugs.debian.org>, 1109633-done <1109633-done@bugs.debian.org>, 1109634-done <1109634-done@bugs.debian.org>, 1109640-done <1109640-done@bugs.debian.org>
Cc: 
Bcc: 
Date: Sun, 10 Aug 2025 15:45:06 +0200
Subject: The package already exists in Debian

Please do some research before opening ITP/RFP bugs.
This package already exists in Debian.

--
William Desportes

Reply to: