Source: dnsjava Version: 2.1.7-0.1 Severity: serious Dear maintainer,
while I was working on the bnd 1.5 to 2.1 transition, I discovered that dnsjava ships an embedded bnd.jar file with the source package but without providing the sources for it. This is a DFSG violation. Please either remove the jar file from the sources or provide the corresponding sources for it. Regards, Markus -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.2.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: unable to detect