[pkg-go] Bug#1010648: marked as pending in golang-github-pierrec-lz4.v4

Nicholas D Steeves sten at debian.org
Wed Nov 2 01:08:06 GMT 2022


Hi Eric!

Eric Evans <eevans at debian.org> writes:

> This is now a blocker on a recent upstream release of
> golang-github-gocql-gocql as well.  I understand the argument about
> excluding test data, but there is probably a point at which users would be
> better served by a golang-github-pierrec-lz4.v4 without (complete) test
> coverage, than they would be without syncthing, or a modern gocql driver.
>

I agree 100%.

> Perhaps we move forward with a repackaged upstream tarball while waiting
> for upstream to fix these issues?
>

I did this 06 June 2022, where it waited for review until 06 Oct and was
rejected with specious rationale--namely that a Go reimplementation of
the C reference implementation of xxHash was a derived work under the
license of the reference implementation.  This is contrary to Debian
expectations, contrary to the consensus of the debian-legal mailing list
(speculating about license is a liability), and contrary to legal
precedent established in American courts (algorithms are patentable but
not copyrightable, APIs are neither)...  The ftpmaster reviewing this
package also expected me to misattribute the Go reimplementation to the
author of the reference implementation, under the BSD-2-clause license
of the reference implementation.  All of this should be archived on the
Debian Golang mailing list.

I think you'll need to contact ftpmasters about this issue, and about
how it now blocks gocql, because frankly I doubt the package will be
reviewed before the freeze.

https://ftp-master.debian.org/new/golang-github-pierrec-lz4.v4_4.1.14+dfsg-1.html

Feel free to make any changes; it's a team package, and my free time ran
out in September.

Kind regards,
Nicholas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 857 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20221101/2d61f41c/attachment.sig>


More information about the Pkg-go-maintainers mailing list