Package: webext-form-history-control Version: 2.5.1.0-1 Severity: important
Dear maintainer, Your package copies in pieces from other source packages during build and documents that in the Built-Using field. I haven't checked if that's actually correct (according to Debian Policy, i.e. *required* by their licenses [1]), but it's at least causing the issue that we can't get rid of src:jquery in unstable and bookworm right now. jquery was removed in 2020, but its source is being kept around for webext-form-history-control. webext-form-history-control is arch:all so it can't be binNMU'd. Please check if you're using the Built-Using according to policy [1], and if so please rebuild your binary by reuploading. If you "abuse" Built-Using, then please fix your source package. I also note that the code duplication isn't registered in the security embedded-code-copies file [2]. I recommend you keep that file up to date with code embedded in your binaries. Paul [1] https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using [2] https://salsa.debian.org/security-tracker-team/security-tracker/-/blob/master/data/embedded-code-copies