[Pkg-rust-maintainers] Bug#995339: lalrpop: Incomplete license information

[Bastian Germann]

Package: lalrpop
Severity: serious
Version: 0.17.2-7

The d/copyright file only contains the license info of the source package but it 
does not contain the license info for each software that is contained in the 
binary /usr/bin/lalrpop:

X-Cargo-Built-Using: rust-aho-corasick (= 0.7.10-1), rust-ascii-canvas (= 
2.0.0-2), rust-atty (= 0.2.14-2), rust-bit-set (= 0.5.0-1), rust-bit-vec (= 
0.5.0-1), rust-block-buffer (= 0.9.0-4), rust-block-padding (= 0.2.1-1), 
rust-byteorder (= 1.3.4-1), rust-cfg-if-0.1 (= 0.1.10-2), rust-cfg-if (= 
1.0.0-1), rust-cpuid-bool (= 0.1.2-4), rust-diff (= 0.1.12-1), rust-digest (= 
0.9.0-1), rust-dirs (= 3.0.1-1), rust-dirs-sys (= 0.3.5-1), rust-docopt (= 
1.1.0-1), rust-either (= 1.5.0-1), rust-ena (= 0.14.0-1), rust-fixedbitset (= 
0.2.0-1), rust-generic-array (= 0.14.4-1), rust-indexmap (= 1.3.2-1), 
rust-itertools (= 0.9.0-1), rust-lalrpop-util (= 0.17.2-1), rust-lazy-static (= 
1.4.0-1), rust-libc (= 0.2.80-1), rust-log (= 0.4.11-2), rust-memchr (= 
2.3.3-1), rust-new-debug-unreachable (= 1.0.1-1), rust-opaque-debug (= 0.3.0-1), 
rust-petgraph (= 0.5.0-1), rust-phf-shared (= 0.8.0-1), rust-precomputed-hash (= 
0.1.1-1), rust-regex (= 1.3.7-1), rust-regex-syntax (= 0.6.17-1), rust-serde (= 
1.0.106-1), rust-sha2 (= 0.9.2-2), rust-siphasher (= 0.3.1-1), rust-string-cache 
(= 0.8.0-1), rust-strsim (= 0.9.3-1), rust-term (= 0.5.2-3), rust-thread-local 
(= 1.0.1-1), rust-typenum (= 1.12.0-1), rust-unicode-xid (= 0.2.0-1), 
rust-unreachable (= 1.0.0-1), rust-void (= 1.0.2-1), rustc (= 1.48.0+dfsg1-2)

Many of their licenses require copying the license terms to binary 
distributions. I do not think that copying each info manually is a good idea but 
concatenating the copyright files during build (via debcargo?) might be an option.

I think this is a general problem with Debian's Rust packages that contain 
binaries, so maybe you want to get FTP Masters' opinion on this.