Re: Finding a source package
<firstname.lastname@example.org>(James A. Treacy) writes:
> Guy Maor wrote:
> First, due to NMU uploads to other architectures, the source version
> may not match the version: in the package you are looking for.
> This means you need to search the archive for the name of the .dsc
> file. There are about 75 version mismatches in slink (only 2 in hamm)
> so this is not a minor issue.
It actually is a big problem considering the GPL. Debian could
be asked for any source, for wich a binary is awaylable. That means,
to be on the save side, eigther old sources must be kept as long as
there are binaries of it, or binaries must be deleted when a newer
source is uploaded. The second of which is not aceptable at all.
Also all sources the package source depends on (like libs, tools, ...)
must be present in the version used to build a package, otherwise the
might not be rebuild from its source.
Having no source dependencies and no version tracking for binaries,
this is actually impossible to guranty without keeping all old
versions but source dependencies would help a lot in assuring that
sources are awailable as needed by the gpl. Together with the source
dependencies the upload scripts must be changed to delete source no
earlier then when the last package that depends on it is removed (or
updated to a newer version).
May the Source be with you.