On 2023 Sep 26, at 20:36, Paul Wise <p...@debian.org> wrote: > Your analysis is correct, some extra context for this problem: > > The problem you have identified applies to other statically linked > languages too, so I have updated the wiki page to link to it. > > https://wiki.debian.org/StaticLinking
So was this problem previously known but under-acknowledged, or was it simply not brought up before now? I find it surprising that Debian would allow so many license violations to get this far. Is fixing the tooling to handle this considered a priority? If the author of an uncredited dependency were to complain, would Debian be more likely to focus on fixing the tooling posthaste or to just pull whatever packages use the dependency in question? -- John Wodder
