Control: tag -1 -pending Upload rejected because ftpmasters did not accept that the public domain works had been implicitly relicensed by upstream as BSD-3-clause, because I missed one Linux kernel image file in the test data (which needs source to be DFSG free and for license compliance; this one is admittedly serious), and because there was some incredulity about the licensing of other test data. With the exception of the Linux kernel image (absent in v2), the licensing of same test data was not considered a problem for golang-github-pierrec-lz4 (v2).
So for now progress towards fulfilling this ITP is blocked, and thus progress towards Syncthing 1.19.2 is blocked. I believe it would be unwise to exclude all test data from a +dfsg orig tarball (and disable the tests), because this would expose Syncthing users' data to greater potential risk than using an older version of Syncthing with a golang-github-pierrec-lz4 (v2) with CI coverage. On the upside, upstream received notification that shipping kernel images as test data carries with it the obligation to provide source for those GPL-2-only image, so now progress towards license-compliance (whether by removing the image or providing source) can be made upstream--which seems to be a win for the community. Now for the wait... Regards, Nicholas
signature.asc
Description: PGP signature
