Your message dated Wed, 16 Sep 2015 09:33:57 -0400
with message-id <[email protected]>
and subject line maxima: Embedded code copy with missing copyright
has caused the Debian Bug report #795056,
regarding maxima: Embedded code copy with missing copyright
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
795056: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795056
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: maxima
Version: 5.36.1-1
Severity: serious
Justification: Policy 4.5
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]

Hi,

Your packages contains an embedded code copy of texi2html which is
copyright Lionel Cons and others and is licensed under the GPL and
Creative Commons Attribution-ShareAlike license. This information is
missing from debian/copyright of maxima and is thus a violation of
policy §4.5.

I found this bug while working on the reproducible builds project [1] to
make texi2html produce reproducible output.

From that point of view there are two options:

 1. remove the embedded code copy [2] and build-depend on texi2html
    (this would also make policy §4.13 happy). I would prefer this
    solution and would supply you with a patch if you want.             
    The package would not become immediately reproducible with this
    solution though because it does not use dh in debian/rules but
    instead classic debhelper. Because of that $SOURCE_DATE_EPOCH has
    to be exported in debian/rules [3]

 2. keep the embedded code copy and amend your debian/copyright. In this
    case I would open another bug so that your embedded copy of
    texi2html is patched to produce reproducible output.


Kind regards,
akira

[1] https://wiki.debian.org/ReproducibleBuilds/About
[2] https://wiki.debian.org/EmbeddedCodeCopies
[3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Closed with release 5.37-1.

Take care,
-- 
Camm Maguire                                        [email protected]
==========================================================================
"The earth is but one country, and mankind its citizens."  --  Baha'u'llah

--- End Message ---

Reply via email to