[MIR] python-mechanize

[Luís Infante da Câmara]

[Availability]
The package python-mechanize is already in Ubuntu universe.
The package python-mechanize builds for the architectures it is designed to work on.
It currently builds and works for architectures: amd64 arm64 armhf ppc64el riscv64 s390x
Link to package [[https://launchpad.net/ubuntu/+source/python-mechanize|python-mechanize]]

[Rationale]
- The package python-mechanize is required in Ubuntu main as a recommendation of
  openconnect in Ubuntu 22.04 and Kinetic.
- The package python-mechanize will not generally be useful for a large part of
  our user base, but is important/helpful still because it is a recommendation of
  openconnect.

- It would be great and useful to community/processes to have the
  package TBD in Ubuntu main, but there is no definitive deadline.

[Security]
- No CVEs/security issues in this software in the past

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Package does not open privileged ports (ports < 1024)
- Package does not contain extensions to security-sensitive software
  (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many
  and long term critical bugs open
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/python-mechanize/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=python-mechanize
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails
  it makes the build fail, link to build log https://launchpadlibrarian.net/617420512/buildlog_ubuntu-kinetic-amd64.python-mechanize_1%3A0.4.8+pypi-4_BUILDING.txt.gz

- The package does not run an autopkgtest because the Debian maintainer did not add one.

- The package does have not failing autopkgtests right now

[Quality assurance - packaging]
- debian/watch is present and works

- debian/control defines a correct Maintainer field

- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package
  https://launchpad.net/ubuntu/+source/python-mechanize/1:0.4.5-2/+build/18575312/+files/buildlog_ubuntu-focal-amd64.python-mechanize_1%3A0.4.5-2_BUILDING.txt.gz
  https://launchpad.net/ubuntu/+source/python-mechanize/1:0.4.7-1/+build/23003171/+files/buildlog_ubuntu-jammy-amd64.python-mechanize_1%3A0.4.7-1_BUILDING.txt.gz
  https://launchpad.net/ubuntu/+source/python-mechanize/1:0.4.8+pypi-4/+build/24263867/+files/buildlog_ubuntu-kinetic-amd64.python-mechanize_1%3A0.4.8+pypi-4_BUILDING.txt.gz
- Please attach the full output you have got from
  `lintian --pedantic` as an extra post to this bug.
- Lintian overrides are not present for the versions in Ubuntu 20.04 and 22.04.
- Lintian overrides are present for the version in Ubuntu Kinetic, but ok because they only override source-is-missing warnings for test files.

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will be installed by default, but does not ask debconf
  questions higher than medium

- The source packaging (in debian/) should be reasonably easy to
  understand and maintain.
- Packaging and build is easy, link to d/rules
  https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/python-mechanize/1:0.4.5-2/python-mechanize_0.4.5-2.debian.tar.xz (file debian/rules)
  https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/python-mechanize/1:0.4.7-1/python-mechanize_0.4.7-1.debian.tar.xz (file debian/rules)
  https://launchpad.net/ubuntu/+archive/primary/+files/python-mechanize_1%3A0.4.8+pypi-3_1%3A0.4.8+pypi-4.diff.gz (file debian/rules)

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- Owning Team will be https://launchpad.net/~desktop-packages or https://launchpad.net/~desktop-bugs
- Team is not yet, but will subscribe to the package before promotion
- I have subscribed to all changes and comments for bugs in this package.

- This does not use static builds

- This does not use vendored code

- This does not use vendored code

- This package is not rust based

- The package has been built in the archive more recently than the last
  test rebuild

[Background information]
The Package description explains the package well
Upstream Name is mechanize
Link to upstream project https://github.com/python-mechanize/mechanize
This source package was in main until 2009-09-15.

[Luís Infante da Câmara (luis220413)]

For the .dsc file and for the changes file for a clean build of the version in Ubuntu Kinetic, Lintian produces the following output:

W: python-mechanize source: newer-standards-version 4.6.1 (current is 4.6.0.1)
P: python-mechanize source: very-long-line-length-in-source-file LICENSE line 11 is 755 characters long (>512)
P: python-mechanize source: very-long-line-length-in-source-file test/test_form_data/GeneralSearch.html line 17 is 714 characters long (>512)
P: python-mechanize source: very-long-line-length-in-source-file test/test_form_data/MarkedRecords.html line 24 is 867 characters long (>512)
N: 0 hints overridden; 2 unused overrides

W: python3-mechanize: changelog-distribution-does-not-match-changes-file (unstable != kinetic)
W: python-mechanize changes: distribution-and-changes-mismatch kinetic unstable

The last two warnings can be ignored.

[Jeremy Bícha (jbicha)]

We first need to figure out the Owner issue from https://launchpad.net/bugs/1986592

I also notice that you said this is a Recommends. If it's a Recommends, maybe it doesn't need to be a Recommends in Ubuntu and could be a Suggests instead. This would mean that we wouldn't need to have python3-mechanize in main.

[Luís Infante da Câmara (luis220413)]

Sorry, wrong bug for this comment.

[Luís Infante da Câmara (luis220413)]

For the .dsc file and for the changes file for a clean build of the version in Ubuntu 22.04, Lintian produces the following output:

P: python-mechanize source: silent-on-rules-requiring-root [debian/control]
P: python-mechanize source: very-long-line-length-in-source-file LICENSE line 11 is 755 characters long (>512)
P: python-mechanize source: very-long-line-length-in-source-file test/test_form_data/GeneralSearch.html line 17 is 714 characters long (>512)
P: python-mechanize source: very-long-line-length-in-source-file test/test_form_data/MarkedRecords.html line 24 is 867 characters long (>512)

W: python3-mechanize: changelog-distribution-does-not-match-changes-file (unstable != jammy)
W: python-mechanize changes: distribution-and-changes-mismatch jammy unstable
P: python3-mechanize: example-unusual-interpreter /usr/bin/python [usr/share/doc/python3-mechanize/examples/forms/echo.cgi]
P: python3-mechanize: example-unusual-interpreter python [usr/share/doc/python3-mechanize/examples/forms/example.py]
P: python3-mechanize: example-unusual-interpreter python [usr/share/doc/python3-mechanize/examples/forms/simple.py]
P: python3-mechanize: example-unusual-interpreter python [usr/share/doc/python3-mechanize/examples/hack21.py]
P: python3-mechanize: example-unusual-interpreter python [usr/share/doc/python3-mechanize/examples/pypi.py]

[Launchpad Janitor (janitor)]

[Expired for python-mechanize (Ubuntu) because there has been no activity for 60 days.]

[Luís Infante da Câmara (luis220413)]

I have set the status of this bug to Invalid earlier today because the dependency is only needed for an advanced and rare scenario, only reachable through a special value for an advanced command-line flag and where the server recommends the client to install a Java applet (which are very rare nowadays), but the client uses an emulation script (/usr/libexec/openconnect/tncc-emulate.py) included in the openconnect package, mentioned in that command-line flag (specifically, --csd-wrapper=/usr/libexec/openconnect/tncc-emulate.py) and that emulates the behavior of that Java applet. This scenario is documented in /usr/share/doc/openconnect/html/tncc.html, shipped in the openconnect binary package.