[Pkg-rust-maintainers] uv_0.9.16+ds1-1_amd64.changes REJECTED

[Reinhard Tartler]

Findings and Blockers

Incomplete Copyright Attribution: The files in crates/uv-python/python/packaging/ are derived from the packaging project. They are copyrighted by Donald Stufft and individual contributors and licensed under BSD-2-Clause or Apache-2.0. This needs a dedicated stanza in debian/copyright.

License Mismatch: crates/uv-platform/src/libc.rs contains code from glibc-version-rs which is Apache-2.0 only. The current debian/copyright catch-all ("Expat or Apache-2.0") is technically inaccurate for this specific file.


Regarding the included test cases, I concur with Andrew. Please make a note in Debian/copyright along the lines "the binary files in scripts/links are carefully curated test fixtures that accompany the tests. They are easily unpacked and have trivial contents".

Thanks for working on the package, I'm looking forward to accepting the package with the issues above fixed.

Further information may be found at:
   https://dfsg-new-queue.debian.org/reviews/uv

Regards, Reinhard Tartler
Member of the DFSG, Licensing & New Packages Team



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20260424/9681d0ef/attachment.sig>