Package: perl-base
Version: 5.36.0-9

Description:
The Perl project has removed the superfast hash algorithm that was licensed 
under Paul Hsieh licenses back in 2016, starting with the Perl v5.25.8 release.

This can be verified here starting on line 292 : 
https://github.com/Perl/perl5/commit/236a70292a4ef354958701000e8897894141eb26#diff-1df6111f72905bc0931765fbcf59be7a35f30d96a502ee0c4c7a3c24b57ae5baL292

This means that the `copyright` file used for the Debian packaging of Perl is 
outdated and the HSIEH-DERIVATIVE and HSIEH-BSD licenses should be removed from 
its contents.

Impact:
This situation has several implications, like existing automated OSS license 
compliance tools, such as `tern`, reporting inaccurately that the HSIEH 
licenses apply to recent Perl packages on Debian and Debian-based systems.

How to fix:
Remove the HSIEH-DERIVATIVE and HSIEH-BSD licenses sections from the 
`copyright` file used in the Debian packaging of Perl.

Reply via email to