Your message dated Wed, 10 Jun 2015 22:35:49 +0000
with message-id <e1z2ob7-0006wy...@franck.debian.org>
and subject line Bug#788377: fixed in wot 20150421-2
has caused the Debian Bug report #788377,
regarding [src:wot] Some sources are not included in your package
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
788377: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=788377
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:wot
Version: 20150421-1
user: lintian-ma...@debian.org
usertags: source-is-missing
severity: serious
X-Debbugs-CC: ftpmas...@debian.org

Hi,

your package includes some files that seem to lack sources
in prefered forms of modification:

    chrome/wot.jar!/content/libs/jquery.js

According to Debian Free Software Guidelines [1] (DFSG) #2:
 "The program must include source code, and must allow distribution 
  in source code as well as compiled form."

In some cases this could also constitute a license violation for some
copyleft licenses such as the GNU GPL. (While sometimes the licence
allows not to ship the source, the DFSG always mandates source code.)

In order to solve this problem, you could:
1. repack the origin tarball and add the missing source files to it.
2  add the source files to "debian/missing-sources" directory.

Both way satisfy the requirement to ship all source code. The second option
might be preferable due to the following reasons [2]:
 - Upstream can do it too and you could even supply a patch to them, thus
   full filling our social contract [3], see particularly §2.
 - If source and non-source are in different locations, ftpmasters may
   miss the source and (needlessly) reject the package.
 - The source isn't duplicated in every .diff.gz/.debian.tar.* (though
   this only really matters for larger sources).

You could also ask debian...@lists.debian.org or #debian-qa for more
guidance.

[1] https://www.debian.org/social_contract.en.html#guidelines
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8
[3] https://www.debian.org/social_contract

Attachment: signature.asc
Description: This is a digitally signed message part.


--- End Message ---
--- Begin Message ---
Source: wot
Source-Version: 20150421-2

We believe that the bug you reported is fixed in the latest version of
wot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 788...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
David Prévot <taf...@debian.org> (supplier of updated wot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 10 Jun 2015 18:01:47 -0400
Source: wot
Binary: xul-ext-wot
Architecture: source all
Version: 20150421-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Mozilla Extension Maintainers 
<pkg-mozext-maintain...@lists.alioth.debian.org>
Changed-By: David Prévot <taf...@debian.org>
Description:
 xul-ext-wot - show which websites are trustworthy
Closes: 788377
Changes:
 wot (20150421-2) unstable; urgency=medium
 .
   * Add missing JQuery source (Closes: #788377)
   * Minify proper JavaScript file at build time
Checksums-Sha1:
 96dac76fd3aa3c836d7817b01e7527e547c7ee44 1589 wot_20150421-2.dsc
 8e022a600aa50f27d9c271989380e5de057f0f4d 69092 wot_20150421-2.debian.tar.xz
 01ac89e6a37d3f6ce40c0cb3f6063ff8a6ccfcfc 641040 xul-ext-wot_20150421-2_all.deb
Checksums-Sha256:
 9bb24026861b080cd51ad5af2899ec5bc5488b8352b166b960b95909b4edabb3 1589 
wot_20150421-2.dsc
 07e14cfe8dcd7d264248ec9d2155874661f6ba74fa8bd92360c804edae467e96 69092 
wot_20150421-2.debian.tar.xz
 2d3143b802de3dcd2b15426f54d201a02be7df4bbb58e2deda98e6b3b3fb74b8 641040 
xul-ext-wot_20150421-2_all.deb
Files:
 14a20b38d2bcff8f8638bab3f4235fca 1589 web optional wot_20150421-2.dsc
 69f6eaf766e314fad74dc9ef7eb05a28 69092 web optional 
wot_20150421-2.debian.tar.xz
 6fa293a6975ce3c0f09d6440741101d1 641040 web optional 
xul-ext-wot_20150421-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJVeLacAAoJEAWMHPlE9r08JAoH/3CBIvXxD1r7H8XYBHgHAV29
TGkhJ75EMhxAzq/j2jvlQK9j6XckAXFnMMtrAj1YsBTGkhINvI0n1YaHkxiUGx5W
e2Q04/bugadVmY/DEN8IfYhQyk4G+XHQkET4IJs7e9hYylRWms7DrQXkLY1WLger
OSY8NBTiD2m5B/PocrA34n8KTGgm/VzC9NzFor1IS7wcoGBUM3QuoWWYQ4poo1/7
BjuszGeRChYo5ZsgSONqzD27DqvTs4MylNvk/Vqmeel1HnUxA87DMYcw7/YP8Tuz
zXx2u2v5HrZUcQLGqXLmGHXirfKkdBzDfWnKm1eolNsnUfiGT3oX6JIEadryz54=
=dD7T
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to