request-tracker4 has several false positives too - I have installed the missing sources in third-party-source via a separate upstream-provide tarball. Don't we need a hints file in this lintian package to suggest additional places to look for sources? Cheers, Dominic.