Used these instructions as guide to create debian metadata:
https://wiki.debian.org/Packaging/Intro#The_packaging_work_flow
https://wiki.debian.org/Python/LibraryStyleGuide

Debian build instructions for upstream release 0.11.2.dev3:
-----------------------------------------------------------
 # Assuming sbuild is installed and chroot is created
 # https://wiki.debian.org/sbuild

 # Download upstream tarball + signature and rename to expected pattern
 wget https://github.com/theupdateframework/tuf/releases/download/v0.11.2.dev3/tuf-0.11.2.dev3.tar.gz \
  -O python-tuf_0.11.2.dev3.orig.tar.gz
 wget https://github.com/theupdateframework/tuf/releases/download/v0.11.2.dev3/tuf-0.11.2.dev3.tar.gz.asc \
  -O python-tuf_0.11.2.dev3.orig.tar.gz.asc

 # Extract upstream tarball
 tar xf python-tuf_0.11.2.dev3.orig.tar.gz

 # Clone upstream repo for debian files and tests
 git clone https://github.com/theupdateframework/tuf.git \
  tuf-upstream

 # Copy debian files (from debian branch)
 git -C tuf-upstream checkout debian --
 cp -r tuf-upstream/debian tuf-0.11.2.dev3/

 # Change to unpacked tarball
 cd tuf-0.11.2.dev3

 # Build (w/o tests)
 # NOTE: (1) Securessystemslib is not yet in debian, you need to first build it
 # locally (see instructions at
 # secure-systems-lab/securesystemslib@9d36a9f)
 # and pass it as `--extra-package`
 # NOTE: (2) `--extra-package` does not seem to work for tests during sbuild,
 # hence the nocheck option. This should be easier once securesystemslib is in.
 DEB_BUILD_OPTIONS=nocheck sbuild -A -s -d unstable \
    --extra-package /path/to/python3-securesystemslib_0.11.3-1_all.deb

 # Sign debian files (replace keyid if necessary)
 debsign -k 8BA69B87D43BE294F23E812089A2AD3C07D962E8

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>

Drop debian/compat and replace "debhelper (>= 12~)" with
"debhelper-compat (= 12)" in debian/control.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>

Fixes timewarp-standards-version lintian warning:
The source package refers to a Standards-Version that was released
after the date of the most recent debian/changelog entry.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>

Replace RFS bug number with ITP bug number in first changelog
entry.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>

This change is needed for debian packaging effort of latest release 0.17.0

#263

Because this key update is critical in the trust's chain,
may I request upstream to double check and acknowledge this change.

This key was obtained from WoT using:

    wget https://files.pythonhosted.org/packages/3a/7d/d1cadc8c68cdfe035412ca11a2fa3105a0a3fd18e4212053cf8f67bdd02a/tuf-0.17.0.tar.gz
    wget https://files.pythonhosted.org/packages/3a/7d/d1cadc8c68cdfe035412ca11a2fa3105a0a3fd18e4212053cf8f67bdd02a/tuf-0.17.0.tar.gz.asc

    gpg --verify  tuf-0.17.0.tar.gz.asc
    gpg: assuming signed data in 'tuf-0.17.0.tar.gz'
    gpg: Signature made Thu 25 Feb 2021 12:42:50 PM CET
    gpg:                using RSA key 08F3409FCF71D87E30FBD3C21671F65CB74832A4
    gpg: Can't check signature: No public key

    gpg --recv-key 08F3409FCF71D87E30FBD3C21671F65CB74832A4 \
      --keyserver hkp://keys.gnupg.net
    gpg --verify ../tuf-0.17.0.tar.gz.asc
    gpg --fingerprint 08F3409FCF71D87E30FBD3C21671F65CB74832A4
    # pub   rsa3072 2020-03-17 [SC] [expires: 2030-03-15]
    #      08F3 409F CF71 D87E 30FB  D3C2 1671 F65C B748 32A4
    # uid           [ unknown] Joshua Lock (GPG on YubiKey) <jlock@vmware.com>
    # sub   rsa3072 2020-03-17 [E] [expires: 2030-03-15]
    # sub   rsa3072 2020-03-17 [A] [expires: 2030-03-15]

    gpg --armor --export 08F3409FCF71D87E30FBD3C21671F65CB74832A4 \
      > debian/upstream/signing-key.asc

Cc:  Sebastien Awwad <sebastien.awwad@gmail.com @awwad>
Cc:  Lukas Puehringer <lukas.puehringer@nyu.edu @lukpueh>
Cc:  Joshua Lock <jlock@vmware.com @joshuagl>
Relate-to: https://www.debian.org/doc/manuals/debmake-doc/ch05.en.html#signing-key
Origin: https://github.com/CrossStream/tuf/tree/debian/master
Forwarded: #1299
Signed-off-by: Philippe Coval <rzr@users.sf.net>

Change-Id: Ib59e8dd0b489b48b210efb51915b7135695d1438
Fordwarded: #1300
Relate-to: #263
Signed-off-by: Philippe Coval <rzr@users.sf.net>

It was removed since v0.15.0

Thanks-to: <Lukas Puehringer <lukas.puehringer@nyu.edu>
Relate-to: #263
Signed-off-by: Philippe Coval <rzr@users.sf.net>

Change-Id: I4f19349f135bff1fce3590143900fa7c63d21c5d
Relate-to: #263
Signed-off-by: Philippe Coval <rzr@users.sf.net>

Relate-to: https://lists.debian.org/debian-python/2021/03/msg00005.html
Change-Id: Idc7f396a6dd2447c35f82d0a63641e1d4c203c61
Signed-off-by: Philippe Coval <rzr@users.sf.net>

…ian/review/master

debian/control: Lint using cme