Andreas, Especially if a project uses files / libaries from different sources, it can be tedious to check which file runs under what specific license. But once established, an optional help to future maintainers of a (not only Debian) package can be a [SPDX license identifier] as an early comment into the corresponding file. As an example, Python scripts then start by
``` python #!/usr/bin/env python3 # SPDX-License-Identifier: BSD-3-Clause ``` A tool like [licensecheck] can (if wanted recursively across a directory) report this information for every file back to the CLI. Don't forget `sort`, `uniq` etc. can process this further. Best, Norwid [SPDX license identifier]: https://spdx.dev/learn/handling-license-info/ [licensecheck]: https://tracker.debian.org/pkg/licensecheck

