DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: mozc 3.33.6133+ds1-0.1

Package Information

DescriptionMozc input method - data files

Mozc is a Japanese Input Method Editor (IME) designed for multi-platform such as Chromium OS, Windows, Mac and Linux.

This package provides the essential data files.

This open-source project originates from Google Japanese Input.

MaintainerNobuhiro Iwamatsu <iwamatsu@debian.org>
Changed ByKentaro Hayashi <kenhys@xdump.org>
Sponsorkenhys@debian.org
Distributionunstable
Architectureall amd64 arm64 riscv64 loong64 ppc64el
VCSgit: https://salsa.debian.org/debian/mozc.git (browse)
Closes#1085173
Popcon Installs2321
Binary NEWYes (new binary packages of a source already in sid)
Trackerhttps://tracker.debian.org/pkg/mozc
Uploaded11 days ago

New Package Report

.changes◂
Sourcemozc
Version3.33.6133+ds1-0.1
Changed-ByKentaro Hayashi <kenhys@xdump.org>
Architecturesource amd64 all
Distributionunstable
DateSat, 26 Sep 2026 08:36:55 +0900
Changelog◂
mozc (3.33.6133+ds1-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream release 3.33.6133. (Closes: #1085173)
     Tested through experimental versions ~exp1 to ~exp10.
   * Drop uim-mozc package from src:mozc.
     debian/control, debian/rules, debian/copyright
     debian/uim-mozc.docs, debian/uim-mozc.install
     debian/uim-mozc.links, debian/uim-mozc.postinst
     debian/uim-mozc.prerm
     * Instead, it will be provided from src:uim. No need to maintain
       uim related patch sets anymore. uim-mozc(src:uim) should pass
       dfsg-review before Mozc 3.33.6133+ds1-0.1 for proper migration.
       (See #1148915)
   * Extract mozc_renderer into mozc-renderer package.
     debian/control, debian/mozc-renderer.install, debian/mozc-server.install
     * Mark mozc-renderer Suggests: for ibus-mozc.
     * Add Breaks/Replaces: mozc-server (<< 3.33.6133+ds1-0.1)
       for moving mozc_renderer from mozc-server.
.dsc◂
Priorityoptional
Componentmain
Package-Listemacs-mozc deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
emacs-mozc-bin deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
fcitx5-mozc deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
ibus-mozc deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
mozc-data deb utils optional arch=all
mozc-renderer deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
mozc-server deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
mozc-utils-gui deb utils optional arch=amd64,arm64,riscv64,loong64,ppc64el
Sectionutils
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: mozc
Source: https://github.com/google/mozc
Files-Excluded:
 src/gui/tool/mozc_tool.rc
 src/renderer/win32/*
 src/server/mozc_server.rc
 src/win32/*
Comment: The following files were removed because:
 src/gui/tool/mozc_tool.rc: Windows resource file is not used for Debian
 src/renderer/win32/*: These code is not used for Debian
 src/server/mozc_server.rc: Windows resource file is not used for Debian
 src/win32/*: These code is not used for Debian

Files: *
Copyright: 2010-2021, Google Inc.
License: BSD-3-Clause

Files: src/data/dictionary_oss/*
Copyright: 2000, 2001, 2002, 2003 Nara Institute of Science and Technology.
License: BSD-3-Clause-with-ICOT-term 

Files: src/data/dictionary_oss/BUILD.bazel
Copyright: 2010-2021, Google Inc.
License: BSD-3-Clause

Files: src/unix/fcitx5/i18nwrapper.h
       src/unix/fcitx5/mozc_engine.cc
       src/unix/fcitx5/mozc_engine.h
       src/unix/fcitx5/mozc_engine_factory.cc
Copyright: 2017-2017, CSSlayer
License: LGPL-2+

Files: src/third_party/ja_usage_dict/*
Copyright: 2011, Hiroyuki Komatsu, Shoji Ogura, Tsuyoshi Horo
License: BSD-2-Clause

Files: debian/*
Copyright: 2010 - 2022 Nobuhiro Iwamatsu <iwamatsu@debian.org>
License: BSD-3-Clause

Files: debian/patches/0001-Support-fcitx5.patch
Copyright: 2012-2023 Weng Xuetian <wengxt@gmail.com>
License: BSD-3-Clause and LGPL-2+

Files: debian/patches/0006-Add-usage_dict.txt.patch
Copyright: 2011, Hiroyuki Komatsu, Shoji Ogura, Tsuyoshi Horo
License: BSD-2-Clause

Files: debian/patches/0007-Add-material-icons.patch
Copyright: Copyright (c) 2020, Google LLC
License: Apache-2.0

Files: debian/patches/0008-Add-zip-code-data.patch
Copyright: Japan Post Co., Ltd.
License: CC0-1.0

License: CC0-1.0
 Japan Post Co., Ltd. does not assert any copyright.
 You are free to distribute it.
 No permission from Japan Post Co., Ltd. is required.
 .
 On Debian systems the full text of the CC0-1.0 license can be found in
 /usr/share/common-licenses/CC0-1.0

License: Apache-2.0
 On Debian systems the full text of the Apache-2.0 license can be found in
 /usr/share/common-licenses/Apache-2.0.

License: LGPL-2+
 On Debian systems the full text of the LGPL license can be found in
 /usr/share/common-licenses/LGPL-2.

License: BSD-2-Clause
 Redistribution and use in source and binary forms, with or without modification, are
 permitted provided that the following conditions are met:
 .
 * Redistributions of source code must retain the above
   copyright notice, this list of conditions and the
   following disclaimer.
 .
 * Redistributions in binary form must reproduce the above
   copyright notice, this list of conditions and the
   following disclaimer in the documentation and/or other
   materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED
 WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
 PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
 ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
 TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
 ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 .
 1. Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 3. The name Nara Institute of Science and Technology may not be used to
    endorse or promote products derived from this software without specific
    prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY Nara Institute of Science and Technology 
 ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A 
 PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE Nara Institute
 of Science and Technology BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
 TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 
 PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 
 LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 
 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# See discussion in https://wiki.debian.org/IpadicLicense
# about what ICOT-term means and DFSG compliant.
License: BSD-3-Clause-with-ICOT-term
 Copyright 2000, 2001, 2002, 2003 Nara Institute of Science
 and Technology.  All Rights Reserved.
 .
 Use, reproduction, and distribution of this software is permitted.
 Any copy of this software, whether in its original form or modified,
 must include both the above copyright notice and the following
 paragraphs.
 .
 Nara Institute of Science and Technology (NAIST),
 the copyright holders, disclaims all warranties with regard to this
 software, including all implied warranties of merchantability and
 fitness, in no event shall NAIST be liable for
 any special, indirect or consequential damages or any damages
 whatsoever resulting from loss of use, data or profits, whether in an
 action of contract, negligence or other tortuous action, arising out
 of or in connection with the use or performance of this software.
 .
 A large portion of the dictionary entries
 originate from ICOT Free Software.  The following conditions for ICOT
 Free Software applies to the current dictionary as well.
 .
 Each User may also freely distribute the Program, whether in its
 original form or modified, to any third party or parties, PROVIDED
 that the provisions of Section 3 ("NO WARRANTY") will ALWAYS appear
 on, or be attached to, the Program, which is distributed substantially
 in the same form as set out herein and that such intended
 distribution, if actually made, will neither violate or otherwise
 contravene any of the laws and regulations of the countries having
 jurisdiction over the User or the intended distribution itself.
 .
 NO WARRANTY
 .
 The program was produced on an experimental basis in the course of the
 research and development conducted during the project and is provided
 to users as so produced on an experimental basis.  Accordingly, the
 program is provided without any warranty whatsoever, whether express,
 implied, statutory or otherwise.  The term "warranty" used herein
 includes, but is not limited to, any warranty of the quality,
 performance, merchantability and fitness for a particular purpose of
 the program and the nonexistence of any infringement or violation of
 any right of any third party.
 .
 Each user of the program will agree and understand, and be deemed to
 have agreed and understood, that there is no warranty whatsoever for
 the program and, accordingly, the entire risk arising from or
 otherwise connected with the program is assumed by the user.
 .
 Therefore, neither ICOT, the copyright holder, or any other
 organization that participated in or was otherwise related to the
 development of the program and their respective officials, directors,
 officers and other employees shall be held liable for any and all
 damages, including, without limitation, general, special, incidental
 and consequential damages, arising out of or otherwise in connection
 with the use or inability to use the program or any product, material
 or result produced or otherwise obtained by using the program,
 regardless of whether they have been advised of, or otherwise had
 knowledge of, the possibility of such damages at any time during the
 project or thereafter.  Each user will be deemed to have agreed to the
 foregoing by his or her commencement of use of the program.  The term
 "use" as used herein includes, but is not limited to, the use,
 modification, copying and distribution of the program and the
 production of secondary products from the program.
 .
 In the case where the program, whether in its original form or
 modified, was distributed or delivered to or received by a user from
 any person, organization or entity other than ICOT, unless it makes or
 grants independently of ICOT any specific warranty to the user in
 writing, such person, organization or entity, will also be exempted
 from and not be held liable to the user for any such damages as noted
 above as far as the program is concerned.

Review Information

accepted — allocated to awm 10 days ago, started 10 days ago, completed 10 days ago.

Final Comment

Hi,

Package is accepted, but a number of issues were found during the review which you mway want to fix for your next upload.

  1. [important] [licensing] Standalone BSD-3-Clause paragraph is the NAIST/IpaDic text, not Google's; the real dictionary license paragraph is orphaned
  • Files: debian/copyright (License: BSD-3-Clause; Files: src/data/dictionary_oss/*; License: BSD-3-Clause-with-ICOT-term)
  • Evidence: 3. The name Nara Institute of Science and Technology may not be used to endorse or promote products derived from this software without specific prior written permission. and THIS SOFTWARE IS PROVIDED BY Nara Institute of Science and Technology ``AS IS''; the actual license in src/data/dictionary_oss/README.txt is Use, reproduction, and distribution of this software is permitted. ... A large portion of the dictionary entries originate from ICOT Free Software.
  • Problem: The License: BSD-3-Clause paragraph binds Files: * (the whole Google codebase) to a NAIST-flavoured text naming NAIST as the disclaiming party, which misdescribes Google's actual BSD-3-Clause (root LICENSE uses the Google Inc. name clause). Conversely the dictionary files in src/data/dictionary_oss/* are actually licensed under the ICOT/NAIST text, which is reproduced in full only in the License: BSD-3-Clause-with-ICOT-term paragraph that no Files: stanza references, so that paragraph is dead weight and the dictionary files point at the wrong licence text.
  • Fix: Point Files: src/data/dictionary_oss/* at License: BSD-3-Clause-with-ICOT-term, and restore the plain Google BSD-3-Clause text (matching the root LICENSE) in the standalone License: BSD-3-Clause paragraph used by Files: *.
  1. [important] [licensing] fcitx5 component: upstream GPL-2.0+ declaration (metainfo) and translations are not covered; Weng Xuetian not credited on the BSD fcitx5 sources
  • Files: src/unix/fcitx5/org.fcitx.Fcitx5.Addon.Mozc.metainfo.xml.in:6, src/unix/fcitx5/po/*.po, src/unix/fcitx5/*.cc,*.h, debian/copyright
  • Evidence: <project_license>GPL-2.0+</project_license>; po headers This file is distributed under the same license as the fcitx5-mozc package.; source headers such as Copyright 2023-2023, Weng Xuetian <wengxt@gmail.com> ... Redistribution and use in source and binary forms ...
  • Problem: The metainfo installed in fcitx5-mozc and the .po/generated .mo translations declare the fcitx5-mozc addon as GPL-2.0+ (the translations are “same license as the fcitx5-mozc package”), but debian/copyright provides no GPL-2+ coverage at all: the fcitx5 sources fall under Files: * (BSD-3-Clause, Google) plus the four named LGPL-2+ CSSlayer files. The many fcitx5 .cc/.h files authored by Weng Xuetian under BSD-3-Clause are likewise attributed only to Google Inc. by the catch-all. The file's own licence declarations are therefore not accurately described.
  • Fix: Add a Files: stanza for the fcitx5 metainfo and po/* with the licence that actually applies (GPL-2+ if that is the fcitx5-mozc package licence, with a GPL-2+ License paragraph), and name Weng Xuetian as copyright holder on the BSD-3-Clause fcitx5 sources (or extend the 0001 patch stanza intent to the produced files).
  1. [minor] [licensing] fcitx-artwork icons: marguerite's derived-work copyright not represented
  • Files: mozc/source/*.svg
  • Evidence: Upstream fcitx-artwork mozc/README.md: Original Work Copyright 2010-2018, Google Inc. Derived Work Copyright 2013-2014 marguerite <i@marguerite.su> (BSD-3-Clause).
  • Problem: These SVGs (added by 0002-fcitx-artwork.patch) are BSD-3-Clause but the derived-work author is not named anywhere in debian/copyright; they are silently covered by Files: * as Google-only.
  • Fix: Add a Files: mozc/source/* stanza crediting marguerite (and Google) under BSD-3-Clause.
  1. [minor] [licensing] material-design-icons sources are Apache-2.0 but attributed as BSD-3-Clause
  • Files: src/third_party/material_icon_*/file/*.svg, src/third_party/material_icon_*/file/*.png, debian/copyright
  • Evidence: 0007-Add-material-icons.patch header: Author: Copyright (c) 2020, Google LLC, Origin: google/material-design-icons v4.0.0, licensed Apache-2.0.
  • Problem: The icons added by 0007 (and the PNGs generated from them at build time and installed into mozc-data) are Apache-2.0, but they match the Files: * BSD-3-Clause stanza; the License: Apache-2.0 paragraph is referenced only by the Files: debian/patches/0007-Add-material-icons.patch stanza.
  • Fix: Add Files: src/third_party/material_icon_*/file/* with License: Apache-2.0.
  1. [minor] [licensing] Public-domain and non-Google test data are attributed to Google by the catch-all stanza
  • Files: src/data/test/stress_test/sentences.txt, src/data/test/dictionary/*, src/data/dictionary_oss/*
  • Evidence: sentences.txt: the copyright of the original document is already expired; dictionary_oss/README.txt: Public Domain Dataです。使用・変更・配布に関しては一切の制限をつけません。
  • Problem: These Aozora (public domain), IpaDic/ICOT and Okinawa data files are described only by Files: * as Google BSD-3-Clause; the attribution is inaccurate even though the licences are free.
  • Fix: Add Files stanzas covering src/data/test/stress_test/*, src/data/test/dictionary/* and the Okinawa portions on their own terms (public domain / ICOT).
  1. [minor] [packaging] Stale debian/libmozc-protocol.install with no matching binary package
  • Files: debian/libmozc-protocol.install, debian/control
  • Evidence: src/bazel-bin/ipc/libmozc_ipc_pb.so usr/lib/${DEB_HOST_MULTIARCH}/mozc/ and src/bazel-bin/protocol/libmozc_protocol_pb.so ...; there is no Package: libmozc-protocol stanza in debian/control (the dsc Package-List confirms no such binary), and no build target produces those .so files.
  • Problem: The package was added in the ~exp4 changelog and later dropped together with uim-mozc, but the install file was left behind. It is dead weight that confuses where the private shared libraries ended up; it does not break the build because nothing references those targets.
  • Fix: Delete debian/libmozc-protocol.install (nothing installs the private .so any more) or reintroduce/relink the package if the shared libraries are actually needed.
  1. [minor] [packaging] debian/tests/hardening autopkgtest is broken (unset binaries array)
  • Files: debian/tests/hardening, debian/tests/linkage, debian/tests/helper
  • Evidence: hardening: for binary in "${binaries[@]}"; do but the binaries array is defined only in debian/tests/linkage, and debian/tests/helper only defines functions.
  • Problem: Run with set -eu, ${binaries[@]} is an unbound variable, so the hardening autopkgtest aborts with a shell error instead of checking the hardenability of the installed binaries.
  • Fix: Move the binaries array into debian/tests/helper (or declare it in debian/tests/hardening).

Thanks!

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
3.33.6133+ds1-0.1~exp4 faef830f… 2026-08-30 11:22 2026-09-02 09:11 mechtilde accepted VIEW

Back to Dashboard | View all reviews for this package