Package: bat Version: 0.23.0-4 Severity: serious bat's upstream source and the rust-bat_0.23.0.orig.tar.gz file both contain a NOTICE file which, per the packages's Apache 2.0 license, must be preserved in derivative works. However, this NOTICE file is not present in the binary .deb packages distributed by Debian.
Note that bat itself embeds the text of the NOTICE file in its own binary, and the text is displayed when running `batcat --acknowledgements`. However, Paul Wise has stated on the debian-legal mailing list that the NOTICE should still be distributed as a file in the .deb packages: https://lists.debian.org/debian-legal/2023/09/msg00012.html
