On Friday, September 25, 2026 6:02:06 PM Mountain Standard Time Juan Manuel Méndez Rey wrote: > Hi, > > github.com/gocsaf/csaf (ITP #1148988) embeds the OASIS CSAF 2.0 JSON > schemas. They have no licence of their own; the standard covers them and > says "this document itself may not be modified in any way" [1]. Is that > DFSG-free? > > [1] https://docs.oasis-open.org/csaf/csaf/v2.0/os/csaf-v2.0-os.html
That sure sounds DFSG-non-free to me. Do these need to be shipped for the golang-github-gocsaf-csaf package to function or can they removed using Files- Excluded? If they do need to be shipped for the package to function, golang-github- gocsaf-csaf could be included in non-free. -- Soren Stoutner [email protected]
signature.asc
Description: This is a digitally signed message part.
