Bug#954743: lintian: orig-tarball-missing-upstream-signature does not say how to add it to uploaded tarballs

["Chris Lamb" <lamby@debian.org>]

Hi Robert,

> Yes, but IMHO it would be nice if for example there was some wiki page
> online with all the information, and lintian had a link to it.
[…]
> I think lintian makes a really good job in improving quality of Debian
> packages, and I treat all the tags it gives pretty seriously, especially
> if they are warnings or errors. However I would like to have a clear
> straightforward information how to deal with those tags.

I totally agree with the general sentiment that upstream signatures
should be much easier for Debian developers to use. That being said, a
bug report Lintian is not quite the best replace to research or
discuss such the higher-level archive-wide concerns given that that is
too specific to this particular tool, although I would concede there is
not a perfect alternative (debian-mentors? debian-devel? ).

May I make a suggestion? In the course of you uncovering the easiest
approach to this, perhaps you could take create such a wiki page or,
if it does not require that much text, suggest additions and changes
to this tag in Lintian?

Indeed, you are in the best position to do this given that you are not
subject to any form of "curse of knowledge" cognitive bias.

Anyway, thank you for your kind remarks about Lintian and look forward
to improving it together with you.


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-