[Pkg-mozext-maintainers] Bug#559971: itsalltext: Source package does not contain corresponding source for work

Ben Finney ben+debian at benfinney.id.au
Tue Dec 8 01:17:42 UTC 2009


Package: itsalltext
Version: 1.3.1-1
Severity: serious
Justification: Policy 2.3

The source package for ‘itsalltext’ is not the corresponding source
for the work. Instead, it is a bundling of the binary ‘*.jar’
libraries.

This violates the license terms of the work (GPLv3 §6) and as such
means the package is currently illegal to distribute by the Debian
project.


The GPLv3 defines the “corresponding source” as:

    The "Corresponding Source" for a work in object code form means
    all the source code needed to generate, install, and (for an
    executable work) run the object code and to modify the work,
    including scripts to control those activities.

So, fixing this bug involves changing the source package to consist of
the corresponding source for the work plus the Debian packaging, all
licensed appropriately.

For this package, the source package needs to include all the files
from the VCS repository (currently a Git repository located at
‘git://gerf.org/itsalltext.git’). The Debian packaging then should use
the ‘Makefile’ to build the binary package from source.

The package's build system uses the third-party packages ‘jslint’
<URL:http://bugs.debian.org/559969> and (for the documentation)
‘jsdoc-toolkit’ <URL:http://bugs.debian.org/559963>.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (900, 'stable')
Architecture: powerpc (ppc64)

Kernel: Linux 2.6.30-2-powerpc64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_AU.UTF-8)
Shell: /bin/sh linked to /bin/dash

-- 
 \           “Self-respect: The secure feeling that no one, as yet, is |
  `\                                    suspicious.” —Henry L. Mencken |
_o__)                                                                  |
Ben Finney <ben at benfinney.id.au>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozext-maintainers/attachments/20091208/e49a4b6c/attachment.pgp>


More information about the Pkg-mozext-maintainers mailing list