Bug#1143005: ITP: python-slh-dsa -- Python implementation of the SLH-DSA signature scheme

Hi Simon,

Thank you again for offering to review and potentially sponsor the package.

The package is now ready for review:

   - mentors.debian.net: https://mentors.debian.net/package/python-slh-dsa/
   - Salsa: https://salsa.debian.org/colinxu/slhdsa

There is currently a warning about debian/watch shown on mentors.debian.net.
I believe this is a false positive, as uscan --report-status completes
successfully and reports the expected upstream version.

I would be very grateful if you could review it when you have a chance.
Please let me know if there is anything I should change or improve.

Best regards,
Xu Colin

xu colin <[email protected]> 于2026年7月30日周四 14:36写道：

> Hi Simon,
> Thank you — I really appreciate your willingness to review it and
> potentially sponsor.
> I’ll upload the package to mentors.debian.net and send you the Salsa URL
> once everything is ready for review.
> Best,
> Xu Colin.
>
> Simon Josefsson <[email protected]> 于2026年7月29日周三 23:08写道：
>
>> I'm happy to review and potentially sponsor - please upload to
>> mentors.d.net and send me a Salsa URL when you are ready for review.
>>
>> /Simon
>>
>> xu colin <[email protected]> writes:
>>
>> > Package: wnpp
>> > Severity: wishlist
>> > Owner: Xu Colin <[email protected]>
>> > X-Debbugs-Cc: [email protected]
>> >
>> >    -
>> >
>> >    Package name : python-slh-dsa
>> >    Version : 0.2.3
>> >    Upstream Author : Xu Colin <[email protected]>
>> >    -
>> >
>> >    URL : https://github.com/colinxu2020/slhdsa
>> >    -
>> >
>> >    License : GNU Lesser General Public License Version 3
>> >    Programming Lang: Python
>> >    Description : Python implementation of the SLH-DSA signature scheme
>> >
>> > slh-dsa is a Python implementation of SLH-DSA, the stateless
>> > hash-based digital signature algorithm standardized in FIPS 205.
>> > It provides the public Python module "slhdsa" and supports Python 3.
>> > The package has no third-party runtime dependencies.
>> > .
>> > Performance-sensitive modules can optionally be compiled into CPython
>> > extension modules using mypyc. The upstream project uses setuptools as
>> > its PEP 517 build backend and provides automated tests, continuous
>> > integration, and binary-wheel builds through cibuildwheel.
>> > .
>> > The project has been actively maintained over the past three years,
>> > with its most recent upstream commit approximately one month ago. It
>> > currently receives approximately 150,000 downloads per month from
>> > PyPI and is used as a direct dependency by trezor-firmware.
>> > .
>> > I intend to maintain this package in Debian. The proposed binary
>> > package name is python3-slhdsa. I am not yet a Debian Developer and
>> > will seek sponsorship for the initial upload.
>
>
xu colin <[email protected]> 于2026年7月30日周四 14:36写道：

> Hi Simon,
> Thank you — I really appreciate your willingness to review it and
> potentially sponsor.
> I’ll upload the package to mentors.debian.net and send you the Salsa URL
> once everything is ready for review.
> Best,
> Xu Colin.
>
> Simon Josefsson <[email protected]> 于2026年7月29日周三 23:08写道：
>
>> I'm happy to review and potentially sponsor - please upload to
>> mentors.d.net and send me a Salsa URL when you are ready for review.
>>
>> /Simon
>>
>> xu colin <[email protected]> writes:
>>
>> > Package: wnpp
>> > Severity: wishlist
>> > Owner: Xu Colin <[email protected]>
>> > X-Debbugs-Cc: [email protected]
>> >
>> >    -
>> >
>> >    Package name : python-slh-dsa
>> >    Version : 0.2.3
>> >    Upstream Author : Xu Colin <[email protected]>
>> >    -
>> >
>> >    URL : https://github.com/colinxu2020/slhdsa
>> >    -
>> >
>> >    License : GNU Lesser General Public License Version 3
>> >    Programming Lang: Python
>> >    Description : Python implementation of the SLH-DSA signature scheme
>> >
>> > slh-dsa is a Python implementation of SLH-DSA, the stateless
>> > hash-based digital signature algorithm standardized in FIPS 205.
>> > It provides the public Python module "slhdsa" and supports Python 3.
>> > The package has no third-party runtime dependencies.
>> > .
>> > Performance-sensitive modules can optionally be compiled into CPython
>> > extension modules using mypyc. The upstream project uses setuptools as
>> > its PEP 517 build backend and provides automated tests, continuous
>> > integration, and binary-wheel builds through cibuildwheel.
>> > .
>> > The project has been actively maintained over the past three years,
>> > with its most recent upstream commit approximately one month ago. It
>> > currently receives approximately 150,000 downloads per month from
>> > PyPI and is used as a direct dependency by trezor-firmware.
>> > .
>> > I intend to maintain this package in Debian. The proposed binary
>> > package name is python3-slhdsa. I am not yet a Debian Developer and
>> > will seek sponsorship for the initial upload.
>>
>