Package: python3-chardet
Version: 7.0.0

It appears that the original LGPL upstream chardet repository [1] has been 
wholly replaced by an LLM-generated derivative work labelled with a 
conflicting, and possibly illegal, MIT license.

If the original source cannot be located and the upstream for Debian changed to 
a legal source, this package may need to be removed from the Debian archive for 
licensing / legal reasons.  While I do not claim to fully understand copyright 
law in this area, I will mention that the LLM used has, in all likelihood, 
incorporated parts of my own GPL and LGPL source code, available publicly, into 
the codebase in question, and that this in and of itself may be a copyright 
violation as I did not license my code under the MIT.  As many other authors 
may have an equal copyright claim to the LLM training data set, and, therefore, 
to its output in this instance, this represents an unwarranted legal risk for 
Debian and more importantly for Debian's user base.

Quite apart from the above concerns, the current code quality is poor, and the 
current version of chardet fails its own test suites.  It is paramount no 
upgrade be made to the Debian version until these issues are settled, 
potentially in relevant court proceedings regarding the associated copyright 
law.

[1] https://github.com/chardet/chardet
[2] https://github.com/chardet/chardet/issues/331

Reply via email to