[Pkg-citadel-devel] webcit_7.42-dfsg-1_amd64.changes REJECTED

[Mike O'Connor]

Hi maintainer,

REJECT: undistributable mix of licenses, insufficient debian/copyright

Sorry, but I must reject this package at this time.  I found many problems with
the package after only going through about half of the files before running out
of time.

./webserver.c, says:
  This program is released under the terms of the GNU General Public License v3

(other similar notices in ./po/da.po, README.txt

however debian/copyright is not referring to
/usr/share/common-licenses/GPL-3.  None of the lcense texts in
debian/copyright refer to GPL v3.  he references to the gpl in
debian/copyright refer to version 2 or later.

--

./static/BubbleTooltips.js says:
 * version is distributed as part of the Citadel system
 * under the terms of the GNU General Public License v2.

 This is a problem in that GPLv3 is not compatible with GPLv2.  If
 this is GPLv2 and we have code which is GPLv3 or GPLv3+, this is not
 redistributable.

 Also, this file being GPLv2 only is not mentioned in debian/copyright


--

./static/dragdrop.js says:
//           (c) 2005-2007 Sammi Williams (http://www.oriontransfer.co.nz, sammi at oriontransfer.co.nz)
but Sammi Williams is not mentioned in debian/copyright

--

./static/datepicker-dev.js says:
 * (c) 2007 Mathieu Jondet <mathieu at eulerian.com>
 * DatePicker is freely distributable under the same terms as Prototype.

Mathieu Jondet is not mentioned in debian/copyright

--
./static/slider.js says:
// Copyright (c) 2005-2007 Marty Haught, Thomas Fuchs

but Marty Haught is not mentioned in debian/copyright

--
./static/controls.js says:
//           (c) 2005-2007 Ivan Krstic (http://blogs.law.harvard.edu/ivan)
//           (c) 2005-2007 Jon Tirsen (http://www.tirsen.com)

neither of these copyright holders is mentioned in debian/copyright.

------

More minor things:

./static/scriptaculous.js says:
// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)
so the copyright notice in debian/copyright should expand the years covered for Thomas Fuchs.

---

upstream should be notified of the mistakes in many of the po files:

"# This file is distributed under the same license as the PACKAGE package."

They probably mean "Citadel package" or "webcit package", or something similar.


bye,
stew



===

If you don't understand why your files were rejected, or if the
override file requires editing, reply to this email.