Hi Reinhard, Thanks for the thorough audit. I re-derived every finding independently with `lrc` + `licensecheck --copyright -r src/` on a clean tree and got exactly your results (GPL-2-only headers, the 17 missing third-party holders, the incomplete Files stanzas, and the stale 1998-2018 year range) with no false positives and nothing extra.
I've opened a merge request against pkg-security-team/testdisk applying the fix to debian/copyright and adding a 7.2-2 changelog entry closing this bug: https://salsa.debian.org/pkg-security-team/testdisk/-/merge_requests/2 regards, Juan
