Debian NEW Queue Sparks LLM Review Backlash
Debian developer Johannes Schauer Marin Rodrigues says he will stop uploading packages to NEW after discovering his submission received an unannounced LLM-generated DFSG review. The advisory review, powered by Debian Inference, has turned automation of Debian’s package gate into a governance and trust dispute.
Debian is trying to automate a notoriously slow package-acceptance bottleneck, but probabilistic copyright triage is a poor fit when maintainers were not clearly told it was happening. The capability may be useful; the default rollout is the real controversy.
- –The generated report says it was neither written nor checked by a DFSG team member, so it cannot replace human review or serve as a package decision. [Example review](https://dfsg-new-queue.debian.org/reviews/field-api-ecmwf)
- –Unlike deterministic tools such as Lintian, model outputs can vary and are difficult to reproduce or audit.
- –Automatic use raises questions about provider disclosure, data handling, token costs, retention, and opt-out controls.
- –First-pass LLM triage could reduce the NEW queue’s long-standing bottleneck and opacity. [Background](https://prodcs.lwn.net/Articles/1084499/)
- –Debian’s least disruptive path is transparent policy, default-off or opt-in review, deterministic checks alongside it, and human escalation.
DISCOVERED
1h ago
2026-10-27
PUBLISHED
3h ago
2026-10-27
RELEVANCE
AUTHOR
edward