[Pkg-javascript-devel] node-tsc-alias_1.8.16-1_amd64.changes REJECTED

Reinhard Tartler siretart at debian.org
Fri May 1 14:00:07 BST 2026


Thanks for your diligence while working on this package. I've had a look
through the source, and while it's mostly there, I have to reject it for
now because of inaccuracies in `debian/copyright` and missing metadata.

### Critical Issues (Blockers)

1.  **Failure to Reproduce Copyright Notices Verbatim**:
    The Expat license requires that "The above copyright notice and this
    permission notice shall be included in all copies or substantial
    portions of the Software." In `debian/copyright`, the upstream
    notice has been modified to "Juste Méthode B. <cervotechit at gmail.com>".
    While this might be an attempt to identify the author's legal name,
    the license mandates verbatim reproduction of the notice found in
    the source: `Copyright (c) 2018 Justkey`. Please update the stanza
    to match the upstream `LICENSE` file exactly.

2.  **Incorrect Copyright Years**:
    The upstream copyright year in `debian/copyright` is listed as 2026,
    but the source code's `LICENSE` file is dated 2018. The years in
    `debian/copyright` must accurately reflect the notices in the
    source.

3.  **Missing Copyright for Test Projects**:
    `projects/project24/package.json` identifies a different author:
    `"author": "Dmitry Kirilyuk <gk.joker at gmail.com>"`. This file is not
    covered by the current `debian/copyright` stanzas. Please add a
    specific stanza for these files, again ensuring you reproduce the
    copyright notice as it appears in the source.

### Required Fixes

-   Update `debian/copyright` to verbatim match the upstream copyright
    notices and years.
-   Add a stanza for `projects/project24/*` to credit Dmitry Kirilyuk.
-   Add `Priority: optional` to the `Source` stanza in `debian/control`
    to comply with Debian Policy 2.5.

-rt

Further information may be found at:
   https://dfsg-new-queue.debian.org/reviews/node-tsc-alias

Regards, Reinhard Tartler
Member of the DFSG, Licensing & New Packages Team



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260501/7e060eaf/attachment.sig>


More information about the Pkg-javascript-devel mailing list