I've taken a look at this package as downloaded by
dget -x https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/pdfio/1.5.0+dfsg-0ubuntu1/pdfio_1.5.0+dfsg-0ubuntu1.dsc I suspect that there are not significant differences to what is in NEW. Following are my reviewing notes: debian/copyright states that the project was licensed under Apache 2.0 with an exception: License: Apache-2.0-with-GPL2-LGPL2-Exception Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS"BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. . On Debian systems, the complete text of the Apache License, Version 2.0 can be found in '/usr/share/common-licenses/Apache-2.0'. . As an exception, if, as a result of your compiling your source code, portions of this Software are embedded into an Object form of such source code, you may redistribute such embedded portions in such Object form without complying with the conditions of Sections 4(a), 4(b) and 4(d) of the License. . In addition, if you combine or link compiled forms of this Software with software that is licensed under the GPLv2 ("Combined Software") and if a court of competent jurisdiction determines that the patent provision (Section 3), the indemnity provision (Section 9) or other Section of the License conflicts with the conditions of the GPLv2, you may retroactively and prospectively choose to deem waived or otherwise exclude such Section(s) of the License, but only in their entirety and only with respect to the Combined Software. This statement can be found in the upstream sources in the file `NOTICE`. That's probably okay, but not very obvious to see. Upstream does make another clarification in README.md: | Legal Stuff | ----------- | | PDFio is Copyright © 2021-2025 by Michael R Sweet. | | This software is licensed under the Apache License Version 2.0 with an | (optional) exception to allow linking against GPL2/LGPL2 software. See the | files "LICENSE" and "NOTICE" for more information. The files in pdfio.xcodeproj/* are probably under the same license as the rest, but again, not exactly obvious. I would drop those files because they are not needed to build and ask upstream to clarify licensing terms I would recommend to ACCEPT this package

