Control: owner -1 ! Control: tag -1 moreinfo On Sun, May 24, 2020 at 12:11:42PM +0000, Vasyl Gello wrote: > dget -x > https://mentors.debian.net/debian/pool/main/libu/libudfread/libudfread_1.0.0-1.dsc
* d/control: + Vcs-* have to point to the packaging repository, not the upstream one. Since this is something maintained by the multimedia team (according to Maintainer) it should have a repo within the multimedia team space. + Homepage points to the upstream VCS: doesn't this project have a real homepage? + Both descriptions are way way too short (1 line). please strive to find at least 3 lines... * d/*.dirs + those two files are totally useless, get rid of them * libudfread-dev.install + you are installing the .a file: do you really need it? As a personal policy I try to remove static libraries rather than adding them… * d/changelog: + Please add the "Initial upload" words in there :) * d/rules: + since you are using dh compat 13, you can go and use "execute_before_dh_installexamples" instead of the current override + you may prefer to add that .la file in d/not-installed instead of overriding dh_missing that way (also relevant if you stop installing the .a file). * d/copyright: + I see that debian/* has a different license than the rest of the package. Theoretically that might cause issue if for example sombody writes a patch for debian, place it under the debian/* license (GPL2+ in this case). That patch then it would taint the upstream license, as combining code with LGPL2.1 and GPL2+ leads to something that is only GPL2+, likely something that upstream wouldn't want. + furthermore, the project is not released under LGPL-2.1, but LGPL-2.1+ ... please pay attention to these details + in the copyright you wrote "2014-2020 VLC authors and VideoLAN", but I can't find any year later than 2017. Lastly, I see all files have only one "Author:" listead in them, I'd find nice if you added at least a Comment: line in that "Files: *" paragraph mentioning that single author. + you missed m4/attributes.m4 - please take note that that GPL-2+ file has a special exception * you uploaded a .asc file, but you have not provided either public signing key in d/upstream/signing-key.asc nor set an appropriate pgp option in d/watch. Nor I can find any signature on the upstream repository (note that I haven't tried to check the signature). Where is it coming from? -- regards, Mattia Rizzolo GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`. More about me: https://mapreri.org : :' : Launchpad user: https://launchpad.net/~mapreri `. `'` Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature