Source: packagesearch Version: 2.8.0 Severity: serious X-Debbugs-Cc: j...@debian.org
The copyright file only states that it is licensed under the GPL, but not which versions. This seems to imply it is licensed under the GPL version 1. The code meanwhile ships the GPL-2 in COPYING. It's unclear whether the code is GPL-3 compatible. I'm not sure this can be said, as there have been contributors aside from the maintainer. My advise would be to contact all the copyright holders, and make sure that everyone is onboard with this actually being GPL-2+ such that when dependencies update to GPL-3 or later versions, you still remain compatible. I am not sure if this bug can be reasonably solved right now, maybe the copyright file can be changed to say GPL-2, I'd certainly also advise using the machine-readable copyright format for it to make everything clear rather than this half-assed free form. The problem to consider with updating the copyright file to just say GPL-2 is whether contributors knew they were contributing to a GPL-2 codebase or whether they contributed thinking it was GPL-1. -- System Information: Debian Release: trixie/sid APT prefers mantic APT policy: (500, 'mantic') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.3.0-7-generic (SMP w/16 CPU threads; PREEMPT) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled -- debian developer - deb.li/jak | jak-linux.org - free software dev ubuntu core developer i speak de, en
