Hi, On Wed, 03 Jun 2015 10:49:19 +0000 bastien =?ISO-8859-1?Q?ROUCARI=C8S?= <roucaries.bastien+deb...@gmail.com> wrote:
> Package: src:genshi > version; 0.7-3 > user: lintian-ma...@debian.org > usertags: source-is-missing > severity: serious > X-Debbugs-CC: ftpmas...@debian.org > > Hi, > > Your package seems to include some files that lack sources > in prefered forms of modification: > examples/tutorial/geddit/static/jquery.js > > According to Debian Free Software Guidelines [1] (DFSG) #2: > "The program must include source code, and must allow distribution > in source code as well as compiled form.". > > This could also constitute a license violation for some copyleft licenses such > as the GNU GPL. > > In order to solve this problem, you could: > 1. repack the origin tarball adding the missing source to it. > 2 add the source files to "debian/missing-sources" directory > > Both way satisfies the requirement that we ship the source. Second option > might be preferable due to the following reasons [2]: > - Upstream can do it too and you could even supply a patch to them, thus full > filling our social contract [3], see particularly §2. > - If source and non-source are in different locations, ftpmasters may > miss the source and (needlessly) reject the package. > - The source isn't duplicated in every .diff.gz/.debian.tar.* (though > this only really matters for larger sources). > > You could also ask debian-qa@lists.debian.org or #debian-qa for more > guidance. > > [1] https://www.debian.org/social_contract.en.html#guidelines > [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8 > [3] https://www.debian.org/social_contract The file in the upstream tarball is not used by the Debian package. It is an old version - 1.1.4 - to use source map file and see the code. But the code is MIT license, easy to find on the internet. /* * jQuery 1.1.4 - New Wave Javascript * * Copyright (c) 2007 John Resig (jquery.com) * Dual licensed under the MIT (MIT-LICENSE.txt) * and GPL (GPL-LICENSE.txt) licenses. * * $Date: 2007-08-23 21:49:27 -0400 (Thu, 23 Aug 2007) $ * $Rev: 2862 $ */ The file can be removed from the upstream tarball. as the package uses a symlink to libjs-jquery Debian package file. I do not know which name give to the new tarball. Is this really necessary? Regards, Herbert
