Package: src:yui3 Version: 3.5.1-1 user: lintian-ma...@debian.org usertags: source-is-missing severity: serious X-Debbugs-CC: ftpmas...@debian.org
Hi, your package includes some files that seem to lack sources in prefered forms of modification: build/io-xdr/io.swf build/uploader/assets/flashuploader.swf build/uploader-deprecated/assets/uploader.swf api/assets/vendor/prettify/prettify-min.js docs/assets/panel/vendor/prettify/prettify-min.js Please override false positive with comment build/text-data-wordbreak/text-data-wordbreak-debug.js (long line due to enumeration) build/datatype-date-format/lang/*.js (enumeration) build/calendar/lang/* (enumeration) build/calendar-base/lang/* (enumeration) According to Debian Free Software Guidelines  (DFSG) #2: "The program must include source code, and must allow distribution in source code as well as compiled form." In some cases this could also constitute a license violation for some copyleft licenses such as the GNU GPL. (While sometimes the licence allows not to ship the source, the DFSG always mandates source code.) In order to solve this problem, you could: 1. repack the origin tarball and add the missing source files to it. 2 add the source files to "debian/missing-sources" directory. Both way satisfy the requirement to ship all source code. The second option might be preferable due to the following reasons : - Upstream can do it too and you could even supply a patch to them, thus full filling our social contract , see particularly §2. - If source and non-source are in different locations, ftpmasters may miss the source and (needlessly) reject the package. - The source isn't duplicated in every .diff.gz/.debian.tar.* (though this only really matters for larger sources). You could also ask debian...@lists.debian.org or #debian-qa for more guidance.  https://www.debian.org/social_contract.en.html#guidelines  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8  https://www.debian.org/social_contract
Description: This is a digitally signed message part.