Hello Reinhard, thanks for the review.

I will have a closer look o your report this week-end and I will see what I can 
do.

Best wishes,
Jerome

On 29/01/2026 22:25, Reinhard Tartler wrote:

found this EULA in the sources: 
https://github.com/styluslabs/Write/blob/master/scribbleres/eula.txt

that's non-compliant with DFSG. Looking at the rest of the sources, this might 
an oversight by upstream. In its current form, the ambiguity makes it 
problematic for Debian. Please work with upstream to get that EULA removed or 
at least clarified.

Additionally, I found a missing copyright attribution:

  nanovgXC/src/fontstash.h
  2:// Copyright (c) 2020 Stylus Labs - see LICENSE.txt
  4:// Copyright (c) 2013 Mikko Mononen [email protected]
  538:// Copyright (c) 2008-2010 Bjoern Hoehrmann <[email protected]>


this is at 
https://github.com/styluslabs/nanovgXC/blob/333ef76a43e8773995076b3f8f568e1df5719518/src/fontstash.h#L541-L542

That points to http://bjoern.hoehrmann.de/utf-8/decoder/dfa/ which requires 
attribution to Bjorn. Upstream may be in violation with that term as well, I 
need you to clarify this with upstream and Bjoern Hoerhmann

Further information may be found at:
    https://dfsg-new-queue.debian.org/reviews/styluslabs-write

Regards, Reinhard Tartler
Member of the DFSG and New Packaging Team



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.


--
Jerome BENOIT | calculus+at-rezozer^dot*net
https://qa.debian.org/[email protected]
AE28 AE15 710D FF1D 87E5  A762 3F92 19A6 7F36 C68B

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to