Hi Eric! Eric Evans <eevans@debian.org> writes: > This is now a blocker on a recent upstream release of > golang-github-gocql-gocql as well. I understand the argument about > excluding test data, but there is probably a point at which users would be > better served by a golang-github-pierrec-lz4.v4 without (complete) test > coverage, than they would be without syncthing, or a modern gocql driver. > I agree 100%. > Perhaps we move forward with a repackaged upstream tarball while waiting > for upstream to fix these issues? > I did this 06 June 2022, where it waited for review until 06 Oct and was rejected with specious rationale--namely that a Go reimplementation of the C reference implementation of xxHash was a derived work under the license of the reference implementation. This is contrary to Debian expectations, contrary to the consensus of the debian-legal mailing list (speculating about license is a liability), and contrary to legal precedent established in American courts (algorithms are patentable but not copyrightable, APIs are neither)... The ftpmaster reviewing this package also expected me to misattribute the Go reimplementation to the author of the reference implementation, under the BSD-2-clause license of the reference implementation. All of this should be archived on the Debian Golang mailing list. I think you'll need to contact ftpmasters about this issue, and about how it now blocks gocql, because frankly I doubt the package will be reviewed before the freeze. https://ftp-master.debian.org/new/golang-github-pierrec-lz4.v4_4.1.14+dfsg-1.html Feel free to make any changes; it's a team package, and my free time ran out in September. Kind regards, Nicholas
Attachment:
signature.asc
Description: PGP signature