#1109364 ITP: php-slim-psr7 -- PSR-7 message implementation for Slim framework

Package:
wnpp
Source:
wnpp
Submitter:
Ahmed Gamal
Date:
2025-08-10 19:01:01 UTC
Severity:
normal
Tags:
#1109364#5
Date:
2025-07-16 04:20:09 UTC
From:
To:
  Package name : php-slim-psr7
  Version : 1.4.1
  Upstream Author : Slim Framework Team <
https://github.com/slimphp/Slim-Psr7>
  URL : https://github.com/slimphp/Slim-Psr7
  License : MIT
  Programming Lang: PHP
  Description : PSR-7 message implementation for Slim framework

 PSR-7 message implementation that also provides common utility methods
 for working with HTTP messages. This library is part of the Slim framework
 and provides a complete implementation of the PSR-7 HTTP message interface.

 - Why is this package useful/relevant?
   - This package is required by FOSSology (ITP: #924659) as a dependency
   - It provides PSR-7 HTTP message implementation needed by Slim framework
   - Many PHP applications use Slim framework and need this dependency
   - It's a well-maintained, widely-used library in the PHP ecosystem

 - Do you use it?
   - This is being packaged as part of the FOSSology packaging effort
   - FOSSology uses Slim framework for its web interface

 - How do you plan to maintain it?
   - Will maintain as part of the FOSSology packaging team
   - Following Debian PHP packaging guidelines
   - Using pkg-php-tools for automated dependency management

 - Are you looking for co-maintainers or a sponsor?
   - Looking for a sponsor to help publish this as a Debian package
   - Part of the larger FOSSology packaging effort

 This package is a dependency for FOSSology (ITP: #924659) and is needed
 to complete the packaging of FOSSology for Debian.

 Thanks,
 Ahmed Gamal

#1109364#12
Date:
2025-08-10 13:45:06 UTC
From:
To:
Please do some research before opening ITP/RFP bugs.
This package already exists in Debian.

#1109364#17
Date:
2025-08-10 22:52:28 UTC
From:
To:
Dear William,

Thanks for the note.

I’d like to request reopening #1109364 because this ITP targets a specific
version constraint required by FOSSology that differs from the version
currently in the archive.

FOSSology (ITP: #924659) depends on Slim 4 and uses Slim-specific PSR-7
classes (e.g. Slim\Psr7\Factory\ServerRequestFactory, Slim\Psr7\Response,
Slim\Psr7\UploadedFile, and the ResponseEmitter). These are not provided by
alternative PSR-7 implementations (nyholm/guzzlehttp-psr7), so we need the
Slim implementation.

Version requirement:
- Required range: php-slim-psr7 >= 1.4.0 and < 1.5.0 (or, conservatively,
<< 2~)
- PSR compatibility: psr/http-message 1.x and psr/http-factory 1.x
- Reason: FOSSology’s integration and tests are pinned to 1.4.x behavior
for request/response and uploaded file handling; newer versions alter
behavior and break current integration.

If the version already available in Debian matches the above range and
provides the Slim PSR-7 concrete classes, I will happily use it and close
this request. If not, I’d like to proceed so that FOSSology can build
reproducibly against the tested 1.4.x line.

Happy to adjust to team guidance (e.g., tightening dependency bounds to the
existing package version, or providing 1.4.x if needed).

Best regards,
Ahmed Gamal
FOSSology Debian Packaging

#1109364#22
Date:
2025-08-10 22:56:13 UTC
From:
To:
Dear William,

Thanks for the note.

Please reopen #1109364. While a php-slim-psr7 package exists, FOSSology
(ITP: #924659) requires the 1.4.x line for compatibility with its Slim
4-based web interface.

Why reopen:
- FOSSology uses Slim-specific PSR-7 classes (e.g., Slim\Psr7\Response,
Slim\Psr7\Factory\ServerRequestFactory, ResponseEmitter) that are not
drop-in replaceable by other PSR-7 implementations.
- Our integration and CI are validated against the 1.4.x behavior; newer
series introduce changes that currently break the integration.

Requested bounds:
- Depend on: php-slim-psr7 (>= 1.4, < 1.5)  [or exactly 1.4.1 if preferred]
- PSR compatibility: psr/http-message 1.x and psr/http-factory 1.x

If Debian already ships 1.4.x with the Slim classes above, I will use it
and close this request. If the archive carries a different series, I’d like
to proceed to ensure FOSSology builds reproducibly.

Happy to follow team guidance (e.g., tightening bounds, or providing a
parallel-major package name if needed).

Best regards,
Ahmed Gamal
FOSSology Debian Packaging