[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1010648: marked as pending in golang-github-pierrec-lz4.v4



Control: tag -1 -pending

Upload rejected because ftpmasters did not accept that the public domain
works had been implicitly relicensed by upstream as BSD-3-clause,
because I missed one Linux kernel image file in the test data (which
needs source to be DFSG free and for license compliance; this one is
admittedly serious), and because there was some incredulity about the
licensing of other test data.  With the exception of the Linux kernel
image (absent in v2), the licensing of same test data was not considered
a problem for golang-github-pierrec-lz4 (v2).

So for now progress towards fulfilling this ITP is blocked, and thus
progress towards Syncthing 1.19.2 is blocked.  I believe it would be
unwise to exclude all test data from a +dfsg orig tarball (and disable
the tests), because this would expose Syncthing users' data to greater
potential risk than using an older version of Syncthing with a
golang-github-pierrec-lz4 (v2) with CI coverage.

On the upside, upstream received notification that shipping kernel
images as test data carries with it the obligation to provide source for
those GPL-2-only image, so now progress towards license-compliance
(whether by removing the image or providing source) can be made
upstream--which seems to be a win for the community.

Now for the wait...

Regards,
Nicholas

Attachment: signature.asc
Description: PGP signature


Reply to: