Bug#753956: [emscripten] Some sources are not included in your package

[bastien ROUCARIES]

Package: emscripten
Version:  1.10.0~20140205~ef1e460-1
user: lintian-maint at debian.org
usertags: source-is-missing
severity: serious
X-Debbugs-CC: ftpmaster at debian.org

Hi,

Your package seems to include some files that lack sources
in prefered forms of modification:

    src/emscripten-source-map.min.js
    tools/crunch-worker.js

The following are false positive and you should supply override (source location is not found by search & replace)
    third_party/lzma.js/lzma-decoder.js
    third_party/lzma.js/lzma-full.js
    third_party/websockify/include/web-socket-js/WebSocketMain.swf
    third_party/websockify/include/web-socket-js/swfobject.js
    third_party/websockify/include/web-socket-js/src/WebSocketMain.swf
    third_party/websockify/include/web-socket-js/src/swfobject.js


According to Debian Free Software Guidelines [1] (DFSG) #2:
 "The program must include source code, and must allow distribution 
  in source code as well as compiled form.".

This could also constitute a license violation for some copyleft licenses such as the GNU GPL.

In order to solve this problem, you could:
1. repack the origin tarball adding the missing source to it.
2  add the source files to "debian/missing-sources" directory

Both way satisfies the requirement that we ship the source. Second option
might be preferable due to the following reasons [2]:
 - Upstream can do it too and you could even supply a patch to them, thus full filling our social contract [3], see particularly §2.
 - If source and non-source are in different locations, ftpmasters may
   miss the source and (needlessly) reject the package.
 - The source isn't duplicated in every .diff.gz/.debian.tar.* (though
   this only really matters for larger sources).

You could also ask debian-qa at lists.debian.org or #debian-qa for more
guidance.

[1] https://www.debian.org/social_contract.en.html#guidelines
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8
[3] https://www.debian.org/social_contract