Package: web2py
Version: 2.12.3-1
Severity: serious
usertags: source-is-missing
severity: serious
X-Debbugs-CC: ftpmas...@debian.org

Hi,

your package includes some files that seem to lack sources
in preferred forms of modification (analytic seems to be google analytic 
under non free license):
    applications/admin/static/codemirror/addon/hint/html-hint.js line length is 
577 characters (>512)
    applications/admin/static/codemirror/emmet.min.js
    applications/admin/static/js/analytics.min.js
    applications/admin/static/js/bootstrap.min.js
    applications/admin/static/js/calendar.js line length is 32013 characters 
(>512)
    applications/admin/static/js/dd_belatedpng.js line length is 6549 
characters (>512)
    applications/admin/static/js/hogan-2.0.0.js line length is 5779 characters 
(>512)
    applications/admin/static/js/jquery.flot.js line length is 2952 characters 
(>512)
    applications/admin/static/js/jquery.flot.resize.js line length is 863 
characters (>512)
    applications/admin/static/js/jquery.js line length is 32038 characters 
(>512)
    applications/admin/static/js/modernizr.custom.js line length is 14752 
characters (>512)
    applications/admin/static/js/share.js line length is 529 characters (>512)
    applications/admin/static/js/typeahead.min.js
    applications/admin/static/plugin_jqmobile/dd_belatedpng.js line length is 
6549 characters (>512)
    applications/admin/static/plugin_jqmobile/jquery.mobile-1.2.0.min.js
    applications/admin/static/plugin_jqmobile/jquery.mobile-1.3.1.min.js
    applications/examples/static/js/analytics.min.js
    applications/examples/static/js/bootstrap.min.js
    applications/examples/static/js/calendar.js line length is 32013 characters 
(>512)
    applications/examples/static/js/dd_belatedpng.js line length is 6549 
characters (>512)
    applications/examples/static/js/jquery.js line length is 32038 characters 
(>512)
    applications/examples/static/js/modernizr.custom.js line length is 14752 
characters (>512)
    applications/examples/static/js/share.js line length is 529 characters 
(>512)
    applications/welcome/static/js/analytics.min.js
    applications/welcome/static/js/bootstrap.min.js
    applications/welcome/static/js/calendar.js line length is 32013 characters 
(>512)
    applications/welcome/static/js/jquery.js line length is 32038 characters 
(>512)
    applications/welcome/static/js/modernizr-2.8.3.min.js
    applications/welcome/static/js/respond-1.4.2.min.js
    applications/welcome/static/js/share.js line length is 529 characters (>512)


According to Debian Free Software Guidelines [1] (DFSG) #2:
 "The program must include source code, and must allow distribution 
  in source code as well as compiled form."

In some cases this could also constitute a license violation for some
copyleft licenses such as the GNU GPL. (While sometimes the licence
allows not to ship the source, the DFSG always mandates source code.)

In order to solve this problem, you could:
1.  add the source files to "debian/missing-sources" directory.
2. repack the origin tarball and add the missing source files to it.

Both way satisfy the requirement to ship all source code. The second option
might be preferable due to the following reasons [2]:
 - Upstream can do it too and you could even supply a patch to them, thus
   full filling our social contract [3], see particularly §2.
 - If source and non-source are in different locations, ftpmasters may
   miss the source and (needlessly) reject the package.
 - The source isn't duplicated in every .diff.gz/.debian.tar.* (though
   this only really matters for larger sources).

You could also ask debian...@lists.debian.org or #debian-qa for more
guidance.

[1] https://www.debian.org/social_contract.en.html#guidelines
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8
[3] https://www.debian.org/social_contract

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to