[Debian-on-mobile-maintainers] Fwd: Your package buffybox

[undef]

Hi Mechtilde,

Thanks for conducting this review. Could you please confirm which files 
were the problematic GPL licensed files? The only ones I have been able 
to find were outside the lvgl directory and thus my understanding is 
that the quoted text below doesn't apply.

Please correct me if I am wrong, but the issue for LVGL is that the GPL 
is not compatible with MIT, however, my understanding is that the other 
way around is fine. In this case LVGL is a library that by design has to 
be vendored inside buffybox, thus LVGL isn't including GPL files as MIT, 
instead buffybox is linking from GPL code to MIT. If there are any GPL 
files inside lvgl/* that I missed, I'd appreciate a pointer.


Additionally, regarding the MIT license information being missing, I'd 
previously been told that "Expat" should be used rather than "MIT" in 
debian/copyright [0]. If this is incorrect I'm more than happy to change 
it. I believe the license holders for the MIT code are correctly covered 
when considering MIT and Expat as the same.


Thanks again for your review,

Undef.


[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1084022#32

On 12/23/25 04:12, Mechtilde Stehmann wrote:
> Hello,
>
> in the meanwhile I did a complete review:
>
> The ‘MIT’ license information is missing. Also the copyright holders.
>
> In lvgl/docs/CONTRIBUTING.rst:220 f. and lvgl/LICENCE.txt we found the 
> information "The GPL license is not compatible with the MIT license. 
> Therefore, LVGL can not accept GPL licensed code.
>
> Please forward it to the upstream project. So they can correct the 
> license statement.
> Once Upstream has created a new package, you can upload it again.
>
> As soon as the new dfsg-team is ready to work, the new package can be 
> uploaded in a short timeframe.
>
> Version: 3.2.0+dfsg-1 will be rejected
>
> Kind regards
>
> Mechtilde
> Member of the prospective DFSG team
>
>
> -------- Weitergeleitete Nachricht --------
> Betreff: Your package buffybox
> Datum: Thu, 27 Nov 2025 08:13:01 +0100
> Von: Mechtilde Stehmann <mechtilde at debian.org>
> Antwort an: mechtilde at debian.org
> An: DebianOnMobile Maintainers 
> <debian-on-mobile-maintainers at alioth-lists.debian.net>, Jarrah Gosbell 
> <debian at undef.tools>
>
> Hello,
>
> we have checked your package in the New Queue.
>
> To use the automatic copyright check, please add
>
> https://salsa.debian.org/newgateway-team/pipelines/raw/main/pipeline-jobs.yml 
>
>
> to your debian/salsa-ci.yml file.
>
> This will help us reduce the waiting time.
>
> This information is also available as an issue at salsa.debian.org.
>
> Thank you in advance.
>
> Kind regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-on-mobile-maintainers/attachments/20251228/1a664fc0/attachment.htm>