Package: libyaml-libyaml-perl Version: 0.38-2 Severity: serious I just noticed that this package embeds libyaml sources with no mention in either the upstream source or debian/copyright.
While the upstream source doesn't contain any copyright statements, the LICENSE file in libyaml-perl states it's Copyright (c) 2006 Kirill Simonov and licensed under a MIT/Expat license, which both we and libyaml-libyaml-perl upstream are breaching by failing to include the copyright notice. So setting the severity to 'serious'. After adding the license notices, we should document the situation as per <http://wiki.debian.org/EmbeddedCodeCopies>, and look at fixing it by linking against the shared library in the libyaml-0-2 package, (Obviously this part isn't release critical.) Comparing with the upstream/0.1.2 tag of git://andersk.mit.edu/libyaml.git: 734b5e9c71578e42d05de068308b7094 libyaml/src/api.c 734b5e9c71578e42d05de068308b7094 libyaml-libyaml-perl/LibYAML/api.c fc3b40e7be71bf6c15fc119275f1c13d libyaml/src/dumper.c fc3b40e7be71bf6c15fc119275f1c13d libyaml-libyaml-perl/LibYAML/dumper.c 6b3d8e337eb5a374d309acd4c7f68995 libyaml/src/emitter.c b153431e71b1604c3f7826d67466f4bc libyaml-libyaml-perl/LibYAML/emitter.c 5461010b70dd5432b3ae500c42f4d454 libyaml/src/loader.c 5461010b70dd5432b3ae500c42f4d454 libyaml-libyaml-perl/LibYAML/loader.c 9b42a21d4c1d9f1770a8c3f0672a1c22 libyaml/src/parser.c 9b42a21d4c1d9f1770a8c3f0672a1c22 libyaml-libyaml-perl/LibYAML/parser.c a6be5ad730bafc60fbfbe181ef9ff8f5 libyaml/src/reader.c a6be5ad730bafc60fbfbe181ef9ff8f5 libyaml-libyaml-perl/LibYAML/reader.c 85c36febec50ecb05d01908f31906b77 libyaml/src/scanner.c 1f79ae045bab848b43269d7655b6f363 libyaml-libyaml-perl/LibYAML/scanner.c dcbc8a33c493ea9c8ad62c7446440848 libyaml/src/writer.c dcbc8a33c493ea9c8ad62c7446440848 libyaml-libyaml-perl/LibYAML/writer.c 58411f505216a049b8f9cff6aa8226e0 libyaml/src/yaml_private.h 58411f505216a049b8f9cff6aa8226e0 libyaml-libyaml-perl/LibYAML/yaml_private.h -- Niko Tyni nt...@debian.org -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
