Re: License violations for dependencies of Rust and Go programs?
On 2023 Sep 26, at 22:09, Paul Wise <pabs@debian.org> wrote:
>
> On Tue, 2023-09-26 at 14:20 -0400, John Thorvald Wodder II wrote:
>
>> - bat (In addition to the type of problem discussed above, the source code for
>> bat has an Apache 2.0 `NOTICE` file, yet this is not included in the .deb
>> package.)
>
> Please file a severity serious bug report against bat about the NOTICE
> issue, I've mentioned it on the #debian-rust IRC channel though.
>
> https://www.debian.org/Bugs/Reporting
>
> I note that lintian detects the NOTICE issue, so I have requested that
> the ftp-master team turn on auto-rejections for the lintian tag.
On further inspection, it turns out that bat itself compiles the text of its NOTICE file into the binary, and the text is displayed when running `batcat --acknowledgements`, so bat's Apache 2.0 license is being followed. If it's Debian policy to include the NOTICE file in the .deb anyway, let me know so I can file a more appropriate bug report.
-- John Wodder
Reply to: