On 29/12/17 16:28, Chris Lamb wrote:

> golang-github-hashicorp-go-sockaddr lists "cmd/sockaddr/vendor/*" in the 
> Files-Excluded field
> in debian/copyright but the source tree contains 
> cmd/sockaddr/vendor/vendor.json.
> This might be a DFSG violation, the referenced files are probably not
> attributed in debian/copyright or the upstream tarball was simply not
> repacked as intended. Alternatively, the field is simply out of date.

The vendor.json is an autogenerated file that keeps versions (commit
hashes and dates) of every vendored dependency. I usually keep it around
for reference, as it is very useful when things break. I really don't
see much the point of removing it, or making a very complicated
files-excluded field. Also, how can it be a DFSG violation?

Martín Ferrari (Tincho)

Pkg-go-maintainers mailing list

Reply via email to