Source: mold Version: 2.2.0+dfsg-1 Severity: normal With mold 2.0.0 upstream relicensed the project from the AGPL v3.0, to the MIT (or as we call it in Debian, Expat) license. Given the restrictions of the AGPL, this is a major change which could open up mold to more users.
debian/copyright (as of 2.2.0+dfsg-1) has not been updated to reflect this change, and is thus potentially misleading users. This should be easy to fix :) While looking into it, I noticed that a bunch of the code shipped in thirdparty/ is not documented in d/copyright -- namely, blake3, rust-demangle, xxhash, zlib, zstd. Given you're repacking the sources anyway, perhaps the appropriate move here is to just strip the ones shipped in Debian already (xxhash, zlib and zstd, I believe) from the source, and document the rest? Thanks, Faidon