Hello, I patched your debian/copyright:
diff --git a/debian/copyright b/debian/copyright index de906f3..fe559d4 100644 --- a/debian/copyright +++ b/debian/copyright @@ -1,9 +1,10 @@ Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: lodash Source: https://github.com/lodash/lodash - Repackaged to exclude some non-DFSG files (copyrighted ICC profiles embedded or source missing) +Files-Excluded: vendor/firebug-lite/skin/xp/textEditorCorners.png vendor/firebug-lite/skin/xp/textEditorBorders.png +Comment: Repackaged to exclude some non-DFSG files (copyrighted ICC profiles embedded or source missing) Files: * Copyright: JS Foundation and other contributors <https:js.foundation/> Then uscan works fine: $ uscan uscan: Newest version of node-lodash on remote site is 4.17.15, local version is 4.17.11+dfsg (mangled local version is 4.17.11) uscan: => Newer package available from https://github.com/lodash/lodash/archive/4.17.15.tar.gz Successfully repacked ../node-lodash-4.17.15.tar.gz as ../node-lodash_4.17.15+dfsg.orig.tar.xz, deleting 2 files from it. uscan: Newest version of node-lodash on remote site is 4.17.5, ignore local version Successfully symlinked ../lodash-cli-4.17.5.tgz to ../node-lodash_4.17.15+dfsg.orig-lodash-cli.tar.gz.

