[MIR] dav1d (dependency of libheif)

[Vladimir Petko]

[Availability]

The package dav1d is already in Ubuntu universe.
The package dav1d build for the architectures it is designed to work on.
It currently builds and works for architectures: amd64 arm64 armhf i386
ppc64el riscv64 s390x

Link to package https://launchpad.net/ubuntu/+source/dav1d

[Rationale]

- The package dav1d is required in Ubuntu main for libheif
- The package dav1d will generally be useful for a large part of our
  user base as it provides a state of art and royalty-free video
  codec [1].
- Package dav1d provides AV1 decoding like aom, but lacks video encoding.
- The package dav1d is a new runtime dependency of package libheif that
  we will support
- It would be great and useful to community/processes to have the package
  dav1d in Ubuntu main, but there is no definitive deadline.

[Security]

- No CVEs/security issues in this software in the past
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Packages does not open privileged ports (ports < 1024)
- Packages does contain extensions to security-sensitive software:
  the package provides AV1 video codec which processes untrusted input

[Quality assurance - function/usage]

- The package works well right after install

[Quality assurance - maintenance]

- The package is maintained well in Debian/Ubuntu and has not too many
  and long term critical bugs open
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/dav1d/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=dav1d
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]

- The package runs a test suite on build time, if it fails.
  Note: only a small subset of tests is run, because full test requires test
  data download.
- The package does not run an autopkgtest because it is not implemented

[Quality assurance - packaging]

- debian/watch is present and works
- debian/control defines a correct Maintainer field

- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the Package
  https://launchpadlibrarian.net/602621498/buildlog_ubuntu-kinetic-amd64.dav1d_1.0.0-2_BUILDING.txt.gz
- Please attach the full output you have got from
  `lintian --pedantic` as an extra post to this bug.
- Lintian overrides are not present

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will not be installed by default

- Packaging and build is easy, link to d/rules
  https://git.launchpad.net/ubuntu/+source/dav1d/tree/debian/rules

[UI standards]

- Application is not end-user facing (does not need translation)
- End-user applications without desktop file, not needed because
  it does not provide any GUI

[Dependencies]

- No further depends or recommends dependencies that are not yet in main

[Standards compliance]

- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]

- Owning Team will be Foundations Team
- Team is not yet, but will subscribe to the package before promotion

- This does not use static builds
- This does not use vendored code
- This package is not rust based

- The package successfully built during the most recent test rebuild

[Background information]

The Package description explains the package well
Upstream Name is dav1d (AV1 cross-platform decoder)
Link to upstream project https://code.videolan.org/videolan/dav1d

[Lukas Märdian (slyon)]

We don't need this necessarily, but can use src:aom instead, see https://bugs.launchpad.net/ubuntu/+source/libheif/+bug/1827442/comments/50 (and previous comments on that bug report). I'm reducing the priority to "Low" for now.