Hello,
Am 28.10.2026 13:53 schrieb Jonathan Carter (highvoltage):
Also, if people continuously use the DFSG team as the source of
reviewing their package copyright,
Just a side note on that.
Encourage and/or enforce the upstream projects to support REUSE.software
standard
providing SPDX metadata. If the projects are 100% SPDX compliant you
could use
the tool "spdx2debian" [2] to auto-generate a debian/copyright file from
that SPDX meta data.
As upstream maintainer I always thought it is upstreams responsibility
to get copyright
and license right and clean. DMs need to check that of course, but they
shouldn't fix it.
Just my opinion. I know that the reality is different.
Best,
Christian Buhtz
[1] -- https://codeberg.org/buhtz/spdx2debian
