Your message dated Wed, 05 Feb 2020 23:08:56 -0600
with message-id <6412693.2Ka8WoqFUI@riemann>
and subject line problematic sources removed
has caused the Debian Bug report #849830,
regarding [src:digikam] Some sources are not included in your package
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
849830: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849830
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:digikam
Version: 4:5.3.0-1
user: [email protected]
usertags: source-is-missing
severity: serious
X-Debbugs-CC: [email protected]
Hi,
your package includes some files that seem to lack sources
in preferred forms of modification (even if removed during clean target).
I have copied the lintian override that is bogus
# The following two files are removed in clean target, so not part of the
build.
digikam source: source-is-missing core/data/about/js/bootstrap.min.js
digikam source: source-is-missing core/data/about/js/jquery.min.js
According to Debian Free Software Guidelines [1] (DFSG) #2:
"The program must include source code, and must allow distribution
in source code as well as compiled form."
In some cases this could also constitute a license violation for some
copyleft licenses such as the GNU GPL. (While sometimes the licence
allows not to ship the source, the DFSG always mandates source code.)
In order to solve this problem, you could:
1. add the source files to "debian/missing-sources" directory.
2. repack the origin tarball and add the missing source files to it.
Both way satisfy the requirement to ship all source code. The second option
might be preferable due to the following reasons [2]:
- Upstream can do it too and you could even supply a patch to them, thus
full filling our social contract [3], see particularly ยง2.
- If source and non-source are in different locations, ftpmasters may
miss the source and (needlessly) reject the package.
- The source isn't duplicated in every .diff.gz/.debian.tar.* (though
this only really matters for larger sources).
You could also ask [email protected] or #debian-qa for more
guidance.
[1] https://www.debian.org/social_contract.en.html#guidelines
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8
[3] https://www.debian.org/social_contract
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
--- Begin Message ---
digikam (4:6.4.0+dfsg-1) unstable; urgency=medium
[ Steve Robbins ]
* New upstream version 6.4.0
- repacked to remove minified javascript and project/bundles.
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
_______________________________________________
pkg-kde-extras mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-kde-extras
