Source: mongodb Version: 1:3.4.15-1 Severity: serious Justification: Cannot be properly supported
MongoDB should not be part of (at least) Buster for the following reasons: - MongoDB 3.4 will be EOL by June 2019[1], which is way too soon for it to be included in Buster. - MongoDB 3.6 and 4.0 will be supported longer, but upstream's switch to SSPLv1 complicates matters. As discussed in #915537, we will not be distributing any SSPL-licensed software, and keeping the last AGPL-licensed version (3.6.8 or 4.0.3) without the ability to cherry-pick upstream fixes is not a viable option. (I am currently not considering distributing mongodb in non-free.) I will not request removal immediately, to allow other packages time to adjust their dependencies, but eventually auto-removal will kick in. That said, MongoDB 3.4 will probably remain in sid for as long as it is AGPL-licensed and supported upstream. Apollon [1] https://www.mongodb.com/support-policy
