[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: copyright files can be generated by cme (was Re: Copyright file granularity)



On Sat, 14 Nov 2015 15:28:02 +0100
Dominique Dumont <dod@debian.org> wrote:

> Le vendredi 13 novembre 2015, 16:10:14 16:10:14 Wookey a écrit :
> > However there are numerous copyright holders and files contributed
> > on various dates so I spent several hours making this copyright
> > file:
> > https://sources.debian.net/src/ompl/1.0.0%2Bds2-1/debian/copyright/
> > with each copyright owner split out into a separate stanza.  
> 
> Detailed copyright files can be generated by cme. You can either run 
> "cme update dpkg-copyright " [1] or "scan-copyrights" [2] . (you need
> to install cme and lib-config-model-dpkg-perl)
> 
> The first one tries its best to merge current copyright with existing
> debian/copyright file. The second one outputs on stdout coalesced
> copyright information gathered from source files.
> 
> Neither tools are perfect, but they produce information quite close 
> to the required result.

scan-copyrights must get much better handling of non-text formats.
I tried it with a package containing a lot of png files, the example at
the top of the manpage failed because the output of scan-copyrights was
a binary file. (It's a text-like file which contains binary snippets
pretending to be copyright information.)
 
No command line options, no way of preventing it wrapping itself into
knots. I also complained about .pyc files, fine I can remove those.

The output was 46K compared to the current 8K.

$ cme update dpkg-copyright
62;9;c62;9;c62;9;c62;9;c62;9;c

That's output slurped into the next command line buffer of this
terminal which needs Ctrl-C.

Similar problems with packages which contain images. It's not that hard
to handle images in ways that don't spool random characters to the
output.

So no, detailed copyright files for non-trivial packages cannot be
generated and the tools produce nothing close to the required result.
Trivial packages don't need generation.

It's not that neither tool is perfect, neither tool seems to have been
tried with actual packages that may need the tool.

Even with a trivial package, scan-copyrights produces output which
if used as debian/copyright would get rejected by lintian and ftpmaster.

Much more work needs to be done, IMHO, especially considering the
dozens of dependencies which typically need to be installed and which
seem to do nothing useful compared to using a bit of sed and grep.

-- 


Neil Williams
=============
http://www.linux.codehelp.co.uk/

Attachment: pgp0UHJGnWXdj.pgp
Description: OpenPGP digital signature


Reply to: