[Debian-on-mobile-maintainers] Fwd: Your package buffybox

[Mechtilde Stehmann]

Hello,

here I try to answer your question

Am 28.12.25 um 05:07 schrieb undef:
> Hi Mechtilde,
> 
> Thanks for conducting this review. Could you please confirm which files 
> were the problematic GPL licensed files? The only ones I have been able 
> to find were outside the lvgl directory and thus my understanding is 
> that the quoted text below doesn't apply.

<quote>

In lvgl/docs/CONTRIBUTING.rst:220 f. and lvgl/LICENCE.txt we found the
information "The GPL license is not compatible with the MIT license.
Therefore, LVGL can not accept GPL licensed code.

</quote>
> Please correct me if I am wrong, but the issue for LVGL is that the GPL 
> is not compatible with MIT, however, my understanding is that the other 
> way around is fine. In this case LVGL is a library that by design has to 
> be vendored inside buffybox, thus LVGL isn't including GPL files as MIT, 
> instead buffybox is linking from GPL code to MIT. If there are any GPL 
> files inside lvgl/* that I missed, I'd appreciate a pointer.

The problem is the content of "lvgl/docs/CONTRIBUTING.rst:220 f." and 
"lvgl/LICENCE.txt" in the lvgl directory.


> Additionally, regarding the MIT license information being missing, I'd 
> previously been told that "Expat" should be used rather than "MIT" in 
> debian/copyright [0]. If this is incorrect I'm more than happy to change 
> it. I believe the license holders for the MIT code are correctly covered 
> when considering MIT and Expat as the same.

Yes the text of the MIT license shipped by upstream is the same than in 
the publish Expat license.

Please forward the issue to upstream with the above text "LVGL can not 
accept GPL licensed code" regarding the compatibility of GPL and MIT. 
Both license are used in the same package.

The new DFSG team is still waiting to be able to release the package 
into the Debian archive.
You can use this time to clarify the aforementioned license issue with 
upstream. You can also perform the update into the New Queue.

Kind regards

> Thanks again for your review,
> 
> Undef.
> 
> 
> [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1084022#32
> 
> On 12/23/25 04:12, Mechtilde Stehmann wrote:
>> Hello,
>>
>> in the meanwhile I did a complete review:
>>
>> The ‘MIT’ license information is missing. Also the copyright holders.
>>
>> In lvgl/docs/CONTRIBUTING.rst:220 f. and lvgl/LICENCE.txt we found the 
>> information "The GPL license is not compatible with the MIT license. 
>> Therefore, LVGL can not accept GPL licensed code.
>>
>> Please forward it to the upstream project. So they can correct the 
>> license statement.
>> Once Upstream has created a new package, you can upload it again.
>>
>> As soon as the new dfsg-team is ready to work, the new package can be 
>> uploaded in a short timeframe.
>>
>> Version: 3.2.0+dfsg-1 will be rejected
>>
>> Kind regards
>>
>> Mechtilde
>> Member of the prospective DFSG team
>>
>>
>> -------- Weitergeleitete Nachricht --------
>> Betreff: Your package buffybox
>> Datum: Thu, 27 Nov 2025 08:13:01 +0100
>> Von: Mechtilde Stehmann <mechtilde at debian.org>
>> Antwort an: mechtilde at debian.org
>> An: DebianOnMobile Maintainers <debian-on-mobile-maintainers at alioth- 
>> lists.debian.net>, Jarrah Gosbell <debian at undef.tools>
>>
>> Hello,
>>
>> we have checked your package in the New Queue.
>>
>> To use the automatic copyright check, please add
>>
>> https://salsa.debian.org/newgateway-team/pipelines/raw/main/pipeline- 
>> jobs.yml
>>
>> to your debian/salsa-ci.yml file.
>>
>> This will help us reduce the waiting time.
>>
>> This information is also available as an issue at salsa.debian.org.
>>
>> Thank you in advance.
>>
>> Kind regards

-- 
Mechtilde Stehmann
## Debian Developer
## PGP encryption welcome
## F0E3 7F3D C87A 4998 2899  39E7 F287 7BBA 141A AD7F

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/debian-on-mobile-maintainers/attachments/20251231/ce0d6e8d/attachment.sig>