DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: lemonade 9.2.0-1

New Package Report

.changes
Sourcelemonade
Version9.2.0-1
Changed-ByMario Limonciello
Architecturesource amd64
Distributionexperimental
DateFri, 30 Jan 2026 12:42:39 -0600
.dsc
Priorityoptional
Componentmain
Package-Listlemonade-server deb python optional arch=linux-any
Sectionpython
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/lemonade-sdk/lemonade
Upstream-Name: lemonade
Upstream-Contact: lemonade@amd.com

Files: *
Copyright: 2024-2025 Advanced Micro Devices, Inc. (AMD)
           2023 Groq Inc. (portions derived from TurnkeyML/MLAgility)
License: Apache-2.0

Files: .devcontainer/reinstall-cmake.sh
Copyright: Microsoft Corporation
License: Expat
Comment: Script from Microsoft's devcontainer templates

Files: docs/assets/favicon.ico
       docs/assets/logo.png
       docs/favicon.ico
       src/lemonade/tools/server/static/favicon.ico
Copyright: Microsoft Corporation
License: Expat
Comment: Icons derived from Microsoft Fluent Emoji (lemon emoji)
 Source: https://github.com/microsoft/fluentui-emoji

Files: src/app/*
Copyright: 2024-2025 Advanced Micro Devices, Inc. (AMD)
License: Expat
Comment: Electron application with dependencies:
 - axios (MIT)
 - highlight.js (BSD-3-Clause)
 - katex (MIT)
 - markdown-it (MIT)
 - markdown-it-texmath (MIT)
 - react and react-dom (MIT)

Files: debian/*
Copyright: 2025 Mario Limonciello <superm1@debian.org>
License: GPL-2+

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
     http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 On Debian systems, the complete text of the Apache License,
 Version 2.0 can be found in "/usr/share/common-licenses/Apache-2.0".

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the "Software"),
 to deal in the Software without restriction, including without limitation
 the rights to use, copy, modify, merge, publish, distribute, sublicense,
 and/or sell copies of the Software, and to permit persons to whom the
 Software is furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included
 in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

License: GPL-2+
 This package is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation; either version 2 of the License, or
 (at your option) any later version.
 .
 This package is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 .
 You should have received a copy of the GNU General Public License
 along with this program. If not, see <https://www.gnu.org/licenses/>
 .
 On Debian systems, the complete text of the GNU General
 Public License version 2 can be found in "/usr/share/common-licenses/GPL-2".

Review Information

rejected — allocated to siretart 1 month, 3 days ago, started 1 month, 3 days ago, completed 1 month, 3 days ago.

Final Comment

Thanks for working on this package. I found two issues in debian/copyright that need to be addressed before we can accept it.

The Files: * stanza includes the line 2023 Groq Inc. (portions derived from TurnkeyML/MLAgility) in the Copyright field. The parenthetical remark is not a copyright statement; it is a clarification about the origin of some code. This belongs in a Comment field instead. The Copyright field should simply read 2023 Groq Inc. to match the copyright notice given in NOTICE.md.

The favicon stanza references src/lemonade/tools/server/static/favicon.ico, but that path does not exist in the source tree. The actual file lives at src/cpp/resources/static/favicon.ico. Please update the path accordingly.

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
10.0.0-1 87b9f6ed… 2026-03-17 10:14 siretart team VIEW
9.3.2-2 5360d5b4… 2026-02-27 10:50 2026-02-27 11:20 siretart rejected VIEW
9.0.2+dfsg-1 20260208 2026-01-30 18:38 2026-01-30 18:38 siretart rejected VIEW

Public Notes

1 month, 3 days ago ● public

Licenserecon

Command: lrc
Exit code: 3

en: Versions: licenserecon '11.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
** Superfluous file pattern src/lemonade/tools/server/static/favicon.ico
Running licensecheck ....

d/copyright      | licensecheck

Apache-2.0       | Expat             docs/self_hosted_runners.md
Apache-2.0       | Expat             NOTICE.md

1 month, 3 days ago ● public

copyright check

Command: cme check dpkg-copyright
Exit code: 0

(no output)

Back to Dashboard | View all reviews for this package