-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Sean Whitton dixit:
>2.3 & 4.5 > In cases where a package's distribution license explicitly permits > its copyright information to be excluded from distributions of > binaries built from the source, a verbatim copy of the package's > copyright information should normally still be included in the > copyright file, but it need not be if creating and maintaining a > copy of that information involves significant time and effort. I quite disagree. Downstreams will require the licence information, and if it’s included in the source package, it’s easy enough to add it to the binary package, and if not, the above does not apply either. I recently did the work to audit swagger-ui-dist, which is built using “modern web 2.0” tools from over 80 NPM packages, and it took me some hours, but we now have a licence file for the binary, and upstream was actually thankful about these efforts. I would expect that, even if it’s hard, this to be mandatory part of packaging anything for Debian. I will be very unamused about packages without correct corresponding licence information EVEN IF the upstream licence allows such, because ONLY the presence of such correct licence information in the Debian package shows that an actual audit of the legal situation has been done (and only after that, this decision to not include the information could be done, and by then, the information will already be there, so it must (in my opinion) still be included). I hereby ask that this change be reverted. bye, //mirabilos - -- I believe no one can invent an algorithm. One just happens to hit upon it when God enlightens him. Or only God invents algorithms, we merely copy them. If you don't believe in God, just consider God as Nature if you won't deny existence. -- Coywolf Qi Hunt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (MirBSD) Comment: ☃ ЦΤℱ—８ ☕☂☄ iQIcBAEBCQAGBQJcH/Y9AAoJEHa1NLLpkAfgp+MP/3CrdFlXpa3eSwxmUAMTyBfu DuZnl6/LhTFEeqCHyw4Gmvcg4TmkBZPSQoBeVXlCfFzw8nFV1POJZh+KEv5pln4+ lHzmg8luWEoBdnsr0cN7yuQT18sNRcXg0sitPHBEaF5G+igNONOY/ibf55OxwoMu XpCcNp8dANH7/zNeM7Yy+kiXNAHMOe8ugkE0zxydTcBCRPuZwFx261PHM5rr2Gs6 Q4XsjtWbYO02MsynwAQHoNJDLW78mfHKYeQWUyHIpKn9fvqIdFWVO2fq9RbEfo53 9gwOpe9mdSdXjcyzoKo6nprIgPfej/YeX2dJyPfUhRbpWKgFD3obAF8GbuN6n/8t hVMyK4xAk0oiHNrCWBC+vszzmHi+O7aXc/OpIN97KaV6DaiQWt54JBkEoPQ55gnG h31+zu+4ebQSFAoTo28Hm78c9sltaD/cIzkkqsKz5fPaS0p24U1PfWaXvyQLxMAV 8pD17weKXDFBVjabSkeLf+wMcWRpWG6SHKSbRaFPiplPl1Fd4kV1SEFDW8QIslal dwInjL+skexlh6mOtQunEVLCuLANQVW+X7aDBSK6gTXxBy/P1fI2NrrEtOCC7OkJ r6+EnttF5u5C69QK8JTnJoBgO/Z0Wi1j4OeeCyTm7K7bqbGIOsBiEoNFC6uNtpq/ MGfQgF4cjJw24+LPmMFh =es6/ -----END PGP SIGNATURE-----
