Bug#664196: libyaml-libyaml-perl: embeds libyaml without a copyright notice

Niko Tyni ntyni at debian.org
Fri Mar 16 14:09:35 UTC 2012


Package: libyaml-libyaml-perl
Version: 0.38-2
Severity: serious

I just noticed that this package embeds libyaml sources with no mention
in either the upstream source or debian/copyright.

While the upstream source doesn't contain any copyright statements,
the LICENSE file in libyaml-perl states it's Copyright (c) 2006 Kirill
Simonov and licensed under a MIT/Expat license, which both we and
libyaml-libyaml-perl upstream are breaching by failing to include the
copyright notice. So setting the severity to 'serious'.

After adding the license notices, we should document the situation as
per <http://wiki.debian.org/EmbeddedCodeCopies>, and look at fixing
it by linking against the shared library in the libyaml-0-2 package,
(Obviously this part isn't release critical.)

Comparing with the upstream/0.1.2 tag of git://andersk.mit.edu/libyaml.git:

734b5e9c71578e42d05de068308b7094  libyaml/src/api.c
734b5e9c71578e42d05de068308b7094  libyaml-libyaml-perl/LibYAML/api.c
fc3b40e7be71bf6c15fc119275f1c13d  libyaml/src/dumper.c
fc3b40e7be71bf6c15fc119275f1c13d  libyaml-libyaml-perl/LibYAML/dumper.c
6b3d8e337eb5a374d309acd4c7f68995  libyaml/src/emitter.c
b153431e71b1604c3f7826d67466f4bc  libyaml-libyaml-perl/LibYAML/emitter.c
5461010b70dd5432b3ae500c42f4d454  libyaml/src/loader.c
5461010b70dd5432b3ae500c42f4d454  libyaml-libyaml-perl/LibYAML/loader.c
9b42a21d4c1d9f1770a8c3f0672a1c22  libyaml/src/parser.c
9b42a21d4c1d9f1770a8c3f0672a1c22  libyaml-libyaml-perl/LibYAML/parser.c
a6be5ad730bafc60fbfbe181ef9ff8f5  libyaml/src/reader.c
a6be5ad730bafc60fbfbe181ef9ff8f5  libyaml-libyaml-perl/LibYAML/reader.c
85c36febec50ecb05d01908f31906b77  libyaml/src/scanner.c
1f79ae045bab848b43269d7655b6f363  libyaml-libyaml-perl/LibYAML/scanner.c
dcbc8a33c493ea9c8ad62c7446440848  libyaml/src/writer.c
dcbc8a33c493ea9c8ad62c7446440848  libyaml-libyaml-perl/LibYAML/writer.c
58411f505216a049b8f9cff6aa8226e0  libyaml/src/yaml_private.h
58411f505216a049b8f9cff6aa8226e0  libyaml-libyaml-perl/LibYAML/yaml_private.h

-- 
Niko Tyni   ntyni at debian.org





More information about the pkg-perl-maintainers mailing list