Chris Lamb wrote: > > The gnupg2 source package version 2.2.9-1 has this mismatch because i > > was sloppy. > > So, debian/copyright contains: > > Files: debian/org.gnupg.scdaemon.metainfo.xml > Copyright: 2017 Daniel Kahn Gillmor <d...@fifthhorseman.net> > Comment: This file is licensed permissively for the sake of AppStream > License: CC0-1.0 > > ... and debian/org.gnupg.scdaemon.metainfo.xml contains: > > <?xml version="1.0" encoding="UTF-8"?> > <component> > <id>org.gnupg.scdaemon</id> > <metadata_license>GPL</metadata_license> > <name>scdaemon</name> > <summary>USB SmartCard Readers</summary> > <description> > <p> > GnuPG's scdaemon provides access to USB tokens and smartcard > readers that provide cryptographic functionality (e.g. use of > protected secret keys). > </p> > </description> > [...] > > ... which is installed to /usr/share/metainfo via debian/ > scdaemon.install. > > Thus, whilst we can rely on such metadata files existing in /usr/share/ > metainfo/*.xml (or similar) we don't know which file in the source tree > this originated from (and thus it's license). > > Ideas?
Gentle ping on this? :) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-