On 2025-11-16 10:42, Mechtilde Stehmann wrote:
Am 16.11.25 um 17:48 schrieb Simon Josefsson:
Reproducing whatever upstream say about copyright and licensing is
probably sufficient and the right thing to do regardless.
This approach carries the risk that non-free source code could still be
published in Debian. As a community, we should take care to develop processes
to minimize the risk of liability.
Whenever I update debian/copyright, I always rely exclusively on copyright
statements made by upstream, specifically within the version of the code I'm
packaging.
Are you suggesting a stricter standard? Have I been performing this task
negligently?
Best,
Antonio
