Bug#682035: RFS: maxwell/1.2-1 (ITP #662736)

[Benoît Knecht <benoit.knecht@fsfe.org>]

Hi Pedro,

Pedro I. Sanchez wrote:
> I am looking for a sponsor for my package "maxwell"
> 
> * Package name    : maxwell
>   Version         : 1.2-1
>   Upstream Author : Sandy Harris<sandyinchina@gmail.com>
> * URL             : ftp://ftp.cs.sjtu.edu.cn:990/sandy/maxwell/
> * License         : GPL v2
>   Section         : admin
> 
> It builds those binary packages:
> 
> maxwell - Daemon to gather entropy from a timer and feed it to random(4)

There are a few lintian warnings that you should fix:

  P: maxwell source: unversioned-copyright-format-uri http://dep.debian.net/deps/dep5
  W: maxwell: hardening-no-relro usr/bin/maxwell
  W: maxwell: hardening-no-fortify-functions usr/bin/maxwell
  P: maxwell: no-upstream-changelog
  W: maxwell: new-package-should-close-itp-bug

According to debian/copyright, the entire source is GPL-2, but only
maxwell.c has a header mentioning GPL-2 (and not even the standard GPL
header); there's no copy of the GPL included in the package either. You
should ask upstream to add license headers to every source file
(including the man page), following the instructions in the last section
of the GPL [1], and a full copy of the GPL in a LICENSE file.

[1] https://www.gnu.org/licenses/gpl-2.0.html

Also, the source of Maxwell.pdf is missing.

Other than that, the watch file isn't working:

  uscan warning: Filename pattern missing version delimiters ()
    in debian/watch, skipping:
    ftp://ftp.cs.sjtu.edu.cn:990/sandy/maxwell\.tgz

I haven't looked any further into the package.

Cheers,

-- 
Benoît Knecht