Hi Philipp,
Sorry, but 2.5.139 already violates this rule. The following .jar-files marked with * don't have a source in Debian (as far as I know), + is an older version of the one in Debian.
If this is the case then the package seems to violate DFSG (see [0]) and should be included into the non-free category (see [1]) unless all these binaries will be split off and built from (DFSG-compliant) sources.
Florian [0] http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg [1] http://www.debian.org/doc/debian-policy/ch-archive.html#s-non-free