[Pkg-rust-maintainers] rust-vello-common_0.3.0-1_amd64.changes REJECTED

[Reinhard Tartler]

Thanks for your diligence. I've taken a look and found a few DFSG
details regarding third-party code attribution that need addressing
before we can proceed:

The catch-all stanza in debian/copyright claims the entire codebase is
held solely by the Vello Authors under Apache-2.0 or MIT. However,
several files contain code directly ported or copied from other projects
with distinct copyright holders and licenses:

- `src/encode.rs`: The radial gradient implementation (around line 126)
  is translated from Google Skia, which is copyright Google Inc. and
  licensed under BSD-3-Clause. Additionally, `ts_from_line_to_line`
  (around line 972) is copied from tiny-skia, copyright Yevhenii Reizner
  under BSD-3-Clause.
- `src/flatten_simd.rs`: The parabola integral functions and curve
  flattening methods (lines 5 and 244) are copied from the kurbo crate,
  whose copyright is held by the Kurbo Authors.
- `src/math.rs`: `SCALAR_NEARLY_ZERO` (line 31) originates from
  tiny-skia (Yevhenii Reizner, BSD-3-Clause).

Because BSD-3-Clause requires retaining the original copyright notice
and disclaimer upon redistribution, debian/copyright needs dedicated
Files: stanzas covering these files (naming Google Inc., Yevhenii
Reizner, and the Kurbo Authors as appropriate, alongside the Vello
Authors), specifying their effective licenses, and providing the full
text of the BSD-3-Clause license.

Please update debian/copyright in your next upload.

-rt

Further information may be found at:
   https://dfsg-new-queue.debian.org/reviews/rust-vello-common

What to do next:

Unless the review says otherwise, this is a request for changes to this
upload and not a rejection of the package itself. Please fix the points
raised and upload again in the usual way, saying in the changelog what
has changed. The reviewer is told when a package they have reviewed is
uploaded again, and will normally look at it ahead of the rest of their
queue.

If anything in the review is unclear, or you believe it is mistaken,
please reply to this email. Your reply goes to the reviewer, and that is
the normal first step.

Questions about uploading again:
   https://dfsg-new-queue.debian.org/docs/FAQ#resubmit
Common reasons for rejection:
   https://dfsg-new-queue.debian.org/docs/FAQ/REJECT

Regards, Reinhard Tartler
Member of the DFSG, Licensing & New Packages Team



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20261029/3b8792de/attachment.sig>