Hi! I also noticed that there are stuff in the thirdparty directory. Even if they aren't packaged they need to be listed in debian/copyright properly.
You can use e.g. licensecheck -r * to dig out licensing for files. You should also use the libjansson package from Debian instead of the thirdparty source code, if possible. -- Per