[From nobody Sat Jun 27 09:13:04 2026
Received: (at submit) by bugs.debian.org; 4 May 2026 09:58:57 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-14.9 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,FOURLA,FVGT_m_MULTI_ODD,HAS_PACKAGE,
 SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 54; hammy, 150; neutral, 73; spammy,
 0. spammytokens: hammytokens:0.000-+--HTo:N*Debian,
 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*System,
 0.000-+--HTo:N*Bug
Return-path: <siretart@tauware.de>
Received: from tauvpn.tauware.de ([116.203.2.18]:52554 helo=hermes.tauware.de)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <siretart@tauware.de>) id 1wJq4n-0070tT-04
 for submit@bugs.debian.org; Mon, 04 May 2026 09:58:57 +0000
Received: from [192.168.88.76] (helo=x1.int.tauware.de)
 by hermes.tauware.de with esmtps (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96)
 (envelope-from <siretart@tauware.de>) id 1wJq4a-00ELDl-2X
 for submit@bugs.debian.org; Mon, 04 May 2026 11:58:44 +0200
Received: by x1.int.tauware.de (Postfix, from userid 1000)
 id 504BA13F848; Mon, 04 May 2026 05:58:43 -0400 (EDT)
From: Reinhard Tartler <siretart@tauware.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: bmagic: DFSG Issues
Date: Mon, 04 May 2026 05:58:43 -0400
Message-ID: <877bpj4ht8.fsf@tauware.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Delivered-To: submit@bugs.debian.org

Package: bmagic
Version: 7.13.4+dfsg-1
Severity: serious

Dear Maintainer,

I am filing this bug report with severity serious because the current
version of bmagic in the archive contains several violations of the
Debian Free Software Guidelines (DFSG) and licensing documentation
requirements.

1. Non-Free Attribution Requirement (DFSG 1 & 3)
The LICENSE file (and README.md) contains a clause that states:
"Proper BitMagic reference on your product/project page is a REQUIREMENT
for using the Library."
This "requirement" to maintain a specific reference on a project page
goes beyond standard attribution and imposes a specific redistribution
burden. This is effectively an advertising-style clause that restricts
free redistribution and the creation of derived works, making it
incompatible with the DFSG.

2. Binary Blobs (Policy 4.16, DFSG 2)
The source package contains a precompiled header file which is a
binary blob without source form:
msvc32/.vs/bm/v15/ipch/AutoPCH/60fd1a078cd898e5/PERF.ipch
This violates Debian Policy 4.16 ("Missing sources") and DFSG 2, as it
is not the "preferred form for modification". This file should have
been excluded from the +dfsg tarball.

3. Missing Authors and Licenses in debian/copyright
A scan with the `dnq` tool (available from
https://salsa.debian.org/dfsg-team/dfsg-new-queue) using
`dnq author-check` and manual inspection reveals several authors and
licenses that are not declared in debian/copyright:

- Francesco Nidito (MIT): lang-maps/libbm/src/try_throw_catch.h
- Kim Walisch (BSD-2-Clause): src/bmavx2.h, src/bmavx512.h (libpopcnt)
- Wojciech Mu=C5=82a (BSD-2-Clause): src/bmavx2.h, src/bmavx512.h (libpopcn=
t)
- Timo Bingmann (WTFPL-2.0): tests/stress/stacktrace_dbg.h
- Contributors to sse2neon.h (MIT): src/sse2neon.h

Because of the non-free attribution clause and the binary blob, this
package is currently not suitable for the main archive.

Regards,
-rt
]