Package: nautilus Version: 3.8.2-2 Severity: serious Dear maintainer,
while packaging Caja from the MATE Desktop project for Debian, I stumbled over a severe issue with the debian/copyright file of nautilus and its upstream tarball.
(1) the debian/copyright file is incomplete. Several LGPL-2+ files from the upstream tarball (libnautilus-extension1a package) are not covered by debian/copyright.
(2) the upstream source tarball contains a COPYING-DOCS file (containing a version of the GNU FDL-1.1+ license). This file probably relates to the docs/ folder in the upstream tarball (it is not quite clear). These files should not be in Debian as the GNU FDL-1.1+ is not considered as a DFSG compliant license by the Debian project [1].
For Caja the solutions are: (for 1) provide a detailled license file, compliant to DEP-5 proposal (for 2) drop nearly all files found in the docs/ folder (except man pages) light+love, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
pgp6MwvWUXe1b.pgp
Description: Digitale PGP-Signatur