* Package name    : libnet-sftp-perl
   Version         : 0.12
   Upstream Author : David Robins <dbrobins@cpan.org>
* URL             : https://metacpan.org/pod/Net::SFTP
* License         : Perl
   Programming Lang: Perl
   Description     : pure-Perl implementation of the Secure File
Transfer Protocol (SFTP)

Upstream description:

Net::SFTP is a pure-Perl implementation of the Secure File Transfer
Protocol (SFTP) - file transfer built on top of the SSH2 protocol.
Net::SFTP uses Net::SSH::Perl to build a secure, encrypted tunnel
through which files can be transferred and managed. It provides a subset
of the commands listed in the SSH File Transfer Protocol IETF draft,
which can be found at
http://www.openssh.com/txt/draft-ietf-secsh-filexfer-00.txt.

SFTP stands for Secure File Transfer Protocol and is a method of
transferring files between machines over a secure, encrypted connection
(as opposed to regular FTP, which functions over an insecure
connection). The security in SFTP comes through its integration with
SSH, which provides an encrypted transport layer over which the SFTP
commands are executed, and over which files can be transferred. The SFTP
protocol defines a client and a server; only the client, not the server,
is implemented in Net::SFTP.

Because it is built upon SSH, SFTP inherits all of the built-in
functionality provided by Net::SSH::Perl: encrypted communications
between client and server, multiple supported authentication methods
(eg. password, public key, etc.).

Quoting Jonathan Wiltshire (2021-09-03 17:35:24)

Debian has multiple sftp implementations, an one of the differences is
which versions of the protocol is supported (relevant e.g. for
file-locking supported only in recent versions).

Please therefore mention in long description of the package which sftp
protocol versions are supported.  This might be helpful:
<http://www.greenend.org.uk/rjk/sftp/sftpimpls.html>


 - Jonas

with regard to Jonas' question, the POD says unter "COMMAND METHODS":

    Net::SFTP supports all of the commands listed in the SFTP version 3
    protocol specification. Each command is available for execution as a
    separate method, with a few exceptions: SSH_FXP_INIT,
    SSH_FXP_VERSION, and SSH_FXP_READDIR.


Jonathan, have you looked at Net::SFTP::Foreign, which is already
packaged in Debian, and can you comment why that's not an option for
you? It has a compatibility module for Net::SFTP and it leaves all the
cryptographic and more generally security related tasks to the system's
ssh command. There's a discussion of Net::SFTP::Foreign Vs. Net::SFTP
Vs. Net::SSH2::SFTP in the POD.

Florian