Hi Yangfl, I got a quick look at the package, I think getting rid of the prebuilt binaries will be required to upload it. The flashterm, ftelnet and shellinabox directories could probably be removed from the upstream tarball if they are no longer used (this is easily done by adding a Files-Excluded field in debian/copyright). Also out of the embedded .jar files it seems only jta26.jar is actually used, and this one can be replaced by a dependency on the jta package (however I question the relevance of embedding a Java applet in 2018 now that this technology has been removed from all major browsers).
Emmanuel Bourg