RFS: nmbs/1.0.0~1 [ITP] -- confidentiality label binding tools

Luke Ian Turner <[email protected]> Wed, 15 Jul 2026 06:58:54 +0000
Newsgroups gmane.linux.debian.devel.gtk-gnome
Message-ID <DU5PR05MB1120779063FDA1564549BD142B1F82@DU5PR05MB11207.eurprd05.prod.outlook.com>
Good Morning,

Before submitting an RFS to the BTS, I am reaching out to the GNOME team in=
 search of a Sponsor for my package. The primary GUI is a Nautilus Extensio=
n. Any further Desktop functionality will also be targeted at the GNOME Des=
ktop Environment.

The tools add normalised support for "confidentiality labels". A few screen=
shots at the top of the GitHub Repo show quickly what the tool does (note t=
he Classification column etc.) https://github.com/liturner/nmbs

Below is my drafted RFS (not yet submitted). If I do not receive a response=
 within a week or so I will go the BTS route.

Thank you for your consideration in any case and have a great day!

Kind Regards,
Luke


=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D



Subject: RFS: nmbs/1.0.0~1 [ITP] -- confidentiality label binding tools
Package: sponsorship-requests
Severity: wishlist

Dear mentors,

I am looking for a sponsor for my package "nmbs" (Normalised Metadata Bindi=
ng Service):

 * Package name     : nmbs
   Version          : 1.0.0~1
   Upstream contact : Luke Ian Turner <[email protected]>
 * URL              : https://github.com/liturner/nmbs
 * License          : MIT
 * Vcs              : https://github.com/liturner/nmbs
   Section          : utils
   ITP Bug          : #1141958

The source builds the following binary packages:

  nmbs - confidentiality label binding tools
  libnmbs1 - confidentiality label binding support
  libnmbs-dev - development files for libnmbs

To access further information about this package, please visit the followin=
g URL:

  https://mentors.debian.net/package/nmbs/

Alternatively, you can download the package with 'dget' using this command:

  dget -x https://mentors.debian.net/debian/pool/main/n/nmbs/nmbs_1.0.0~1.d=
sc

About the "nmbs" tool:

  nmbs is a Debian-native (developed deliberately and exclusively for Debia=
n) C/C++ project implementing NATO ADatP-4774 and ADatP-4778 confidentialit=
y labelling standards. It provides tools for binding security labels such a=
s NATO UNCLASSIFIED to files and data using the appropriate mechanisms for =
each format, including XMP metadata, HTTP headers, sidecar files and more. =
Security policies can be supplied through standardised SPIF files, allowing=
 organisations to define and apply their own labelling policies via data dr=
iven menus.

  The package currently includes a shared library, a CLI, and a Nautilus ex=
tension for GNOME desktop integration. The goal is to make confidentiality =
metadata usable by end users through normal desktop workflows, including MI=
ME integration, translations, context menus, and file properties. The core =
C/C++ library is intentionally separated from the UI layer so that other in=
tegrations, such as KDE, can be added later.

  I am not aware of any other open source desktop-oriented implementation o=
f these standards. This area is becoming increasingly relevant as confident=
iality labels allow files to carry machine-readable metadata that can be co=
nsumed by Data Loss Prevention and other security tools. nmbs aims to provi=
de an interoperable, open alternative in a space that has traditionally bee=
n dominated by expensive proprietary solutions.

  The project is under active development and is intended for long-term mai=
ntenance. It is already relevant to my professional work, both internally a=
nd in customer projects. For now I plan to keep it in a pre-1.0 state until=
 the libnmbs API has stabilised and I have gained enough Debian packaging e=
xperience to maintain it confidently.

  This is my first Debian package. I am a professional software and IT engi=
neer with around 15 years of experience, and I am willing to learn and main=
tain the package properly. I would be grateful for a sponsor who can review=
 the package, point out any beginner mistakes, and help guide it toward a g=
ood Debian-quality upload.

Changes for the initial release:

 nmbs (1.0.0~1) unstable; urgency=3Dmedium
 .
   * Add Partial XML Binding Profile of ADatP-4778.2 Ed.A V.1
   * Add REST Binding Profile of ADatP-4778.2 Ed.A V.1
   * Add Sidecar Binding Profile of ADatP-4778.2 Ed.A V.1
   * Add Xmp Binding Profile of ADatP-4778.2 Ed.A V.1
   * Add Partial SPIF Support
   * Add MIME Info for .bdo and .spif extensions
   * Add C API for use in e.g. Nautilus extensions
   * Add Nautilus extension to nmbs package
   * Add libnmbs1 shared library and package
   * Add libnmbs-dev package
   * Add nmbs package
   * Add man pages
   * Add html pages and doc-base support
   * Initial Release (Closes: #1141958)

Regards,
--=20
  Luke Ian Turner