Hi Eric!

Eric Evans <eev...@debian.org> writes:

> This is now a blocker on a recent upstream release of
> golang-github-gocql-gocql as well.  I understand the argument about
> excluding test data, but there is probably a point at which users would be
> better served by a golang-github-pierrec-lz4.v4 without (complete) test
> coverage, than they would be without syncthing, or a modern gocql driver.
>

I agree 100%.

> Perhaps we move forward with a repackaged upstream tarball while waiting
> for upstream to fix these issues?
>

I did this 06 June 2022, where it waited for review until 06 Oct and was
rejected with specious rationale--namely that a Go reimplementation of
the C reference implementation of xxHash was a derived work under the
license of the reference implementation.  This is contrary to Debian
expectations, contrary to the consensus of the debian-legal mailing list
(speculating about license is a liability), and contrary to legal
precedent established in American courts (algorithms are patentable but
not copyrightable, APIs are neither)...  The ftpmaster reviewing this
package also expected me to misattribute the Go reimplementation to the
author of the reference implementation, under the BSD-2-clause license
of the reference implementation.  All of this should be archived on the
Debian Golang mailing list.

I think you'll need to contact ftpmasters about this issue, and about
how it now blocks gocql, because frankly I doubt the package will be
reviewed before the freeze.

https://ftp-master.debian.org/new/golang-github-pierrec-lz4.v4_4.1.14+dfsg-1.html

Feel free to make any changes; it's a team package, and my free time ran
out in September.

Kind regards,
Nicholas

Attachment: signature.asc
Description: PGP signature

Reply via email to