[Pkg-mozext-maintainers] Bug#1033507: webext-form-history-control: Built-Using jquery which has been removed otherwise in 2020

[Paul Gevers]

Package: webext-form-history-control
Version: 2.5.1.0-1
Severity: important

Dear maintainer,

Your package copies in pieces from other source packages during build
and documents that in the Built-Using field. I haven't checked if
that's actually correct (according to Debian Policy, i.e. *required*
by their licenses [1]), but it's at least causing the issue that we
can't get rid of src:jquery in unstable and bookworm right now. jquery
was removed in 2020, but its source is being kept around for
webext-form-history-control.

webext-form-history-control is arch:all so it can't be
binNMU'd. Please check if you're using the Built-Using according to
policy [1], and if so please rebuild your binary by reuploading. If
you "abuse" Built-Using, then please fix your source package.

I also note that the code duplication isn't registered in the security
embedded-code-copies file [2]. I recommend you keep that file up to
date with code embedded in your binaries.

Paul

[1] https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using
[2] https://salsa.debian.org/security-tracker-team/security-tracker/-/blob/master/data/embedded-code-copies