Hi Jerome,

I was looking at your package styluslabs-write 0.0~20250700+ds1-1~exp20250705 
and decided to reject it.

You can see the full review history at
https://dfsg-new-queue.debian.org/reviews/styluslabs-write. What follows are my
notes:

found this EULA in the sources: 
https://github.com/styluslabs/Write/blob/master/scribbleres/eula.txt

that's non-compliant with DFSG. Looking at the rest of the sources, this might 
an oversight by upstream. In its current form, the ambiguity makes it 
problematic for Debian. Please work with upstream to get that EULA removed or 
at least clarified.

Additionally, I found a missing copyright attribution:

nanovgXC/src/fontstash.h
2:// Copyright (c) 2020 Stylus Labs - see LICENSE.txt
4:// Copyright (c) 2013 Mikko Mononen [email protected]
538:// Copyright (c) 2008-2010 Bjoern Hoehrmann [email protected]

this is at 
https://github.com/styluslabs/nanovgXC/blob/333ef76a43e8773995076b3f8f568e1df5719518/src/fontstash.h#L541-L542

That points to http://bjoern.hoehrmann.de/utf-8/decoder/dfa/ which requires
attribution to Bjorn. Upstream may be in violation with that term as well, I
need you to clarify this with upstream and Bjoern Hoerhmann

Thanks for working on the package!

Reply via email to