Some minor things you might want to fix in get-orig-source:- Pass "--owner root --group root --mode a+rX" to tar, so that uid/gid/umask of the calling user aren't leaked. - Pass --no-conf to uscan; that way it won't break if the user set USCAN_SYMLINK=rename in their configuration file.
Who holds copyright to the new files get-orig-source adds? -- Jakub Wilk