[Pkg-rust-maintainers] rust-minisign_0.9.1-1_amd64.changes REJECTED

[Reinhard Tartler]

Thanks for your diligence. I've taken a look and noticed a couple of
licensing details in debian/copyright that should be touched up
before this can proceed to the archive:

- src/crypto/blake2b.rs and src/crypto/util.rs: Both files include
  headers declaring dual licensing:
  "Licensed under the Apache License, Version 2.0 <...> or the MIT
  license <...> at your option."
  In debian/copyright, these files fall under the "Files: src/crypto/*"
  stanza with License: MIT, while only src/crypto/cryptoutil.rs is
  given "License: Apache-2.0 or MIT". Please include blake2b.rs and
  util.rs alongside cryptoutil.rs under the Apache-2.0 or MIT stanza.

- src/crypto/sha512.rs: Line 2 carries the following notice:
  "//! (C) Frank Denis <fdenis [at] fastly [dot] com>, public domain"
  In debian/copyright, this file is currently covered by
  "Files: src/crypto/*" as MIT. It should have its own stanza
  documenting the public domain dedication and recording the verbatim
  author notice with the "<fdenis [at] fastly [dot] com>" address.

Please update debian/copyright with these details in your next upload.

-rt

Further information may be found at:
   https://dfsg-new-queue.debian.org/reviews/rust-minisign

Regards, Reinhard Tartler
Member of the DFSG, Licensing & New Packages Team



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20260923/288764f0/attachment.sig>