Hi!
I also noticed that there are stuff in the thirdparty directory.
Even if they aren't packaged they need to be listed in
debian/copyright properly.
You can use e.g.
licensecheck -r *
to dig out licensing for files.
You should also use the libjansson package from Debian
instead of the thirdparty source code, if possible.
--
Per