Le 11/02/16 à 04:41, Paul Wise a écrit : > On Wed, Nov 2, 2016 at 8:51 AM, Julien Muchembled wrote: > >> Bug#842870: ITP: zodbpickle -- Fork of pickle module, for ZODB > > Please ensure the security team are informed about this fork, via > their embedded-code-copies file: > > https://wiki.debian.org/EmbeddedCodeCopies > Thanks, I didn't know. I'll do it.
BTW, about the fact that it's a fork, I'm not sure how to write debian/copyright The upstream license is somewhat a concatenation of: - the PYTHON SOFTWARE FOUNDATION LICENSE VERSION 2 (license of the original code) - and the Zope Public License (ZPL) Version 2.1 (contributions of the Zope Foundation) https://github.com/zopefoundation/zodbpickle/blob/master/LICENSE.txt As starting point, I have the attached file, which is similar to what I have to python-btrees and zc.customdoctests Julien
Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: zodbpickle Upstream-Contact: Zope Foundation and Contributors <zope-...@zope.org> Source: http://pypi.python.org/pypi/zodbpickle Files: * Copyright: (c) 2013-2016 Zope Foundation and Contributors. License: Zope-2.1 Zope Public License (ZPL) Version 2.1 . A copyright notice accompanies this license document that identifies the copyright holders. . This license has been certified as open source. It has also been designated as GPL compatible by the Free Software Foundation (FSF). . Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: . 1. Redistributions in source code must retain the accompanying copyright notice, this list of conditions, and the following disclaimer. . 2. Redistributions in binary form must reproduce the accompanying copyright notice, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution. . 3. Names of the copyright holders must not be used to endorse or promote products derived from this software without prior written permission from the copyright holders. . 4. The right to distribute this software or to use it for any purpose does not give you the right to use Servicemarks (sm) or Trademarks (tm) of the copyright holders. Use of them is covered by separate agreement with the copyright holders. . 5. If any files are modified, you must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. . Disclaimer . THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
signature.asc
Description: OpenPGP digital signature