[pkg-go] Bug#1010648: marked as pending in golang-github-pierrec-lz4.v4

[Nicholas D Steeves]

Control: tag -1 -pending

Upload rejected because ftpmasters did not accept that the public domain
works had been implicitly relicensed by upstream as BSD-3-clause,
because I missed one Linux kernel image file in the test data (which
needs source to be DFSG free and for license compliance; this one is
admittedly serious), and because there was some incredulity about the
licensing of other test data.  With the exception of the Linux kernel
image (absent in v2), the licensing of same test data was not considered
a problem for golang-github-pierrec-lz4 (v2).

So for now progress towards fulfilling this ITP is blocked, and thus
progress towards Syncthing 1.19.2 is blocked.  I believe it would be
unwise to exclude all test data from a +dfsg orig tarball (and disable
the tests), because this would expose Syncthing users' data to greater
potential risk than using an older version of Syncthing with a
golang-github-pierrec-lz4 (v2) with CI coverage.

On the upside, upstream received notification that shipping kernel
images as test data carries with it the obligation to provide source for
those GPL-2-only image, so now progress towards license-compliance
(whether by removing the image or providing source) can be made
upstream--which seems to be a win for the community.

Now for the wait...

Regards,
Nicholas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 857 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20220525/de7cb648/attachment.sig>