DFSG review of qgis 3.40.15+dfsg-1: ACCEPTED

[Sebastiaan Couwenberg]

On 2/6/26 11:57 AM, andrew at mcmillan.net.nz wrote:
> There are some fixes that could be made to debian/copyright and debian/control
> 
> Full review details: https://dfsg-new-queue.debian.org/reviews/qgis

The duck m/\bnot maintained\b/i are a false positive:

"
  At the GIS stackexchange or r/QGIS reddit, which are not maintained by the QGIS team, but where the QGIS and broader GIS community provides lots of advice
"

The http: URLs are verbatim copies from the respective source files.


The dodgy check is questionable, "Possible hardcoded password" issues are false positives. And if they weren't that's something you should report upstream, it has nothing to do with DFSG compliance.


The copyright check complaint about MIT is likewise of little value. We know which version of the MIT license is predominant, and we include the text in the license paragraph.

cme also fails to parse the license alternatives correctly, "LGPL-2.1 with Digia Qt LGPL Exception 1.1" is declared in a standalone license paragraph.


The cme complaints about unnecessary version requirements are also irrelevant for DFSG compliance.


Because of the false positive tendency of these tools, they are not used in our package update work flows.

I'm probably wasting my time replying to an automated message, so I'll only do this once just for the record.

Kind Regards,

Bas

-- 
  PGP Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1