Bug#725034: [UDD]: key-packages not taking INC_SRC dependencies into account

[Niels Thykier <niels@thykier.net>]

Package: qa.debian.org
Severity: normal

Hi,

By the looks of it, the script generating the list of key packages are
not taken the dependencies (i.e. (Pre-)Depends) of key packages into
account.  For the majority of packages, their (Pre-)Depends are always
covered by their popcon[1].
  However, packages listed in INC_SRC may not (and usually doesn't)
have a popcon of 5% so their dependencies cannot be assumed to
included via popcon score.

Note that Britney has a safe-guard, so this cannot cause a package
with reverse dependencies to be removed.  However, it may cause
false-positives to appear in the list of auto-removals.

~Niels

[1] The popcon of any package is at least the same as the popcon of
its must installed reverse dependency.