Re: [src:genshi] Some sources are not included in your package

[Herbert Fortes <terberh@gmail.com>]

Hi,

On Wed, 03 Jun 2015 10:49:19 +0000 bastien =?ISO-8859-1?Q?ROUCARI=C8S?= <roucaries.bastien+debian@gmail.com> wrote:

> Package: src:genshi
> version; 0.7-3
> user: lintian-maint@debian.org
> usertags: source-is-missing
> severity: serious
> X-Debbugs-CC: ftpmaster@debian.org
>
> Hi,
>
> Your package seems to include some files that lack sources
> in prefered forms of modification:
> examples/tutorial/geddit/static/jquery.js
>
> According to Debian Free Software Guidelines [1] (DFSG) #2:
> "The program must include source code, and must allow distribution
> in source code as well as compiled form.".
>
> This could also constitute a license violation for some copyleft licenses such
> as the GNU GPL.
>
> In order to solve this problem, you could:
> 1. repack the origin tarball adding the missing source to it.
> 2 add the source files to "debian/missing-sources" directory
>
> Both way satisfies the requirement that we ship the source. Second option
> might be preferable due to the following reasons [2]:
> - Upstream can do it too and you could even supply a patch to them, thus full
> filling our social contract [3], see particularly §2.
> - If source and non-source are in different locations, ftpmasters may
> miss the source and (needlessly) reject the package.
> - The source isn't duplicated in every .diff.gz/.debian.tar.* (though
> this only really matters for larger sources).
>
> You could also ask debian-qa@lists.debian.org or #debian-qa for more
> guidance.
>
> [1] https://www.debian.org/social_contract.en.html#guidelines
> [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8

> [3] https://www.debian.org/social_contract


The file in the upstream tarball is not used by

the Debian package. It is an old version - 1.1.4 -

to use source map file and see the code. But the

code is MIT license, easy to find on the internet.


/*
 * jQuery 1.1.4 - New Wave Javascript
 *
 * Copyright (c) 2007 John Resig (jquery.com)
 * Dual licensed under the MIT (MIT-LICENSE.txt)
 * and GPL (GPL-LICENSE.txt) licenses.
 *
 * $Date: 2007-08-23 21:49:27 -0400 (Thu, 23 Aug 2007) $
 * $Rev: 2862 $
 */

The file can be removed from the upstream tarball.

as the package uses a symlink to libjs-jquery Debian

package file. I do not know which name give to the

new tarball.


Is this really necessary?




Regards,

Herbert