navit 0.5.7+dfsg-0.1

Package Information

Description	Car navigation system with routing engine Navit is a car navigation system with routing engine. Its modular design is capable of using vector maps of various formats for routing and rendering of the displayed map. It's even possible to use multiple maps at a time. The GTK+ or SDL user interfaces are designed to work well with touch screen displays. Points of Interest of various formats are displayed on the map. The current vehicle position is either read from gpsd or directly from NMEA GPS sensors. The routing engine not only calculates an optimal route to your destination, but also generates directions and even speaks to you using speech-dispatcher. The Debian packaging for navit doesn't provide any map. To see, where you can get maps from, see <http://wiki.navit-project.org/index.php/Main_Page#Maps>.
Maintainer	Gilles Filippini <pini@debian.org>
Changed By	Jeremy Bícha <jbicha@ubuntu.com>
Sponsor	jbicha@debian.org
Distribution	experimental
Architecture	any all
VCS	git: https://salsa.debian.org/debian/navit.git (browse)
Closes	#955926, #967650, #1063337, #1115416, #1115611, #1136533
Popcon Installs	148
Binary NEW	Yes (new binary packages of a source already in sid)
Blocked Bugs	#895291 (important), #947713 (serious)
Tracker	https://tracker.debian.org/pkg/navit
Uploaded	2 hours ago

New Package Report

.changes◂

Version	0.5.7+dfsg-0.1
Changed-By	Jeremy Bícha <jbicha@ubuntu.com>
Architecture	source amd64 all
Distribution	experimental
Date	Sat, 07 Nov 2026 18:33:54 +0100
Source	navit

Changelog◂

navit (0.5.7+dfsg-0.1) experimental; urgency=medium
 .
   * Non-maintainer upload
 .
   [ Jeremy Bícha ]
   * New upstream release
   * Enable Qt for graphics and stop using gtk2 (Closes: #967650, #1136533)
   * Add Build-Depends: libespeak-dev
   * Recommend geoclue-2.0 instead of gpsd
   * Add patch to fix building with system espeak
   * Remove obsolete CMake 4 override
   * Remove obsolete cross building configuration (Closes: #1063337)
   * Stop using dbus-glib (Closes: #955926)
   * debian/navit.install: Install libnavit_core.so
   * debian/navit.install: Install additional files to satisfy dh_missing
   * Remove 2 patches applied in new release
   * Update debhelper compat to 14
   * Update Standards Version to 4.7.4
 .
   [ Christof Schulze ]
   * Enable geoclue support (Closes: #1115416, #1115611)

.dsc◂

Component	main
Package-List	maptool deb misc optional arch=any navit deb misc optional arch=any navit-data deb misc optional arch=all navit-graphics-qt deb misc optional arch=any navit-gui-internal deb misc optional arch=any
Section	misc
Priority	optional

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/navit-gps/navit
Upstream-Name: navit
Files-Excluded:
 fastlane
 gradle/wrapper/gradle-wrapper.jar
 navit/graphics/win32
 navit/fonts
 navit/iphone
 navit/support/espeak
 navit/support/ezxml
 navit/support/gettext_intl
 navit/support/glib
 navit/support/libc
 navit/support/libpng
 navit/support/win32
 navit/support/wordexp
 navit/support/xgetopt
 navit/support/zlib
 navit/tools/gpx2navit_txt
Comment: Exclude unused files to simplify debian/copyright

Files: *
Copyright: 2005-2026 Navit Team
 2005-2026 Navit Team
License: GPL-2

Files: cmake/FindPROTOBUF_C.cmake
Copyright: 2008, Esben Mose Hansen, Ange Optimization ApS
 2009, Kitware, Inc.
 2009, Philip Lowman <philip@yhbt.com>
License: BSD-3-clause
Comment: File copied from cmake

Files: contrib/cursor/navitcursor.svg
Copyright: jfitie@gmail.com
License: CC0-1.0

Files: docs/user/configuration/maps/Other_maps.rst
Copyright: Marco Trevisan (Treviño) -- Copyright 2009
 2005-2026 Navit Team
License: GPL-2

Files: navit/*.h
Copyright: 2005-2026 Navit Team
License: LGPL-2

Files: navit/android/src/org/navitproject/navit/NavitCamera.java
 navit/android/src/org/navitproject/navit/NavitSensors.java
Copyright: 2009, The Android Open Source Project
License: Apache-2.0

Files: navit/script/osm/Geo/OSM/MapFeatures.pm
 navit/script/osm/Geo/OSM/Planet.pm
 navit/script/osm/Geo/OSM/SegmentList.pm
 navit/script/osm/Geo/OSM/Tracks2OSM.pm
 navit/script/osm/Geo/OSM/Upload.pm
 navit/script/osm/Geo/OSM/Write.pm
Copyright: 2006 Jörg Ostertag
License: GPL-2+

Files: navit/script/osm/Geo/OSM/OsmChangeReaderV3.pm
 navit/script/osm/Geo/OSM/OsmChangeReaderV5.pm
 navit/script/osm/Geo/OSM/OsmChangeReaderV6.pm
 navit/script/osm/Geo/OSM/OsmReaderV3.pm
 navit/script/osm/Geo/OSM/OsmReaderV5.pm
 navit/script/osm/Geo/OSM/OsmReaderV6.pm
 navit/script/osm/Geo/OSM/OsmXML.pm
Copyright: 2006, Oliver White
 Martijn van Oosterhout
License: LGPL and GPL-2+
Comment: The files have a header that says License: LGPL
 but GPL-2+ is used later, in the manpage portion.

Files: navit/script/osm/Geo/OSM/APIClientV4.pm
 navit/script/osm/Geo/OSM/APIClientV5.pm
 navit/script/osm/Geo/OSM/APIClientV6.pm
 navit/script/osm/Geo/OSM/EntitiesV3.pm
 navit/script/osm/Geo/OSM/EntitiesV5.pm
 navit/script/osm/Geo/OSM/EntitiesV6.pm
Copyright: Martijn van Oosterhout
License: LGPL-2

Files: navit/graphics/sdl/graphics_sdl.c
Copyright: 2005-2008 bryan rittmeyer <bryanr@bryanr.org>
 2008-2026 Navit Team
License: GPL-2

Files: navit/graphics/sdl/raster.*
Copyright: 2005-2008 bryan rittmeyer <bryanr@bryanr.org>
 1999-2003 Anders Lindström
 2008-2026 Navit Team
License: LGPL-2
Comment: Based on SDL_gfx (c) A. Schiffler
 and SGE (c)1999-2003 Anders Lindström

Files: navit/map/garmin/*
Copyright: 2007 Alexander Atanasov <aatanasov@gmail.com>
 2008-2011 Navit Team
License: GPL-2

Files: contrib/sjjb_import.pl
Copyright: 2012 Lutz Möhrmann
License: GPL-2

Files: navit/icons/*.svg
 navit/textures/*.svg
Copyright: Public Domain
License: CC0-1.0
Comment:
 Map icons CC-0 from SJJB Management:
 http://www.sjjb.co.uk/mapicons/

Files: navit/icons/gui*.svg
Copyright: Jakub Steiner
 Andreas Nilsson
 Luca Ferretti
 Lapo Calamandrei
 Rodney Dawes
 2005-2026 Navit Team
License: GPL-2

Files: navit/icons/hotel.svg
Copyright: jfitie@gmail.com
License: CC-BY-3.0

Files: navit/support/shapefile/*
Copyright: 1999-2008, Frank Warmerdam
 2011-2016 Even Rouault <even dot rouault at mines-paris dot org>
License: Expat or LGPL
Comment:
 This software is available under the following "MIT Style" [0] license,
 or at the option of the licensee under the LGPL (see LICENSE.LGPL).  This
 option is discussed in more detail in shapelib.html.
 .
 [0] Read "Expat".

Files: navit/support/fib/*
Copyright: 1997-2003 John-Mark Gurney <gurney_j@resnet.uoregon.edu>
 2008-2011 Navit Team
License: BSD-2-clause

Files: navit/sunriset.c
Copyright: 1989, 1992, Paul Schlyter <pausch@saaf.se>
           2009-2013 Navit Team
License: public-domain
 Released to the public domain by Paul Schlyter, December 1992.

Files: navit/browserplugin.c
Copyright: 1998 Netscape Communications Corporation
License: MPL-1.1 or GPL-2+ or LGPL-2.1+

Files: po/*
Copyright: 2006-2026, The Navit Team
  OpenStreetMap contributors
License: GPL-2

Files: debian/*
Copyright: 2008 Carsten Wolff <carsten@wolffcarsten.de>
 2008-2009 Bernd Zeimetz <bzed@debian.org>
 2008-2026 Gilles Filippini <gilles.filippini@free.fr>
License: GPL-2+

License: Apache-2.0
 On Debian systems the full text of the Apache License version 2.0
 can be found in the `/usr/share/common-licenses/Apache-2.0' file.

License: BSD-2-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 1. Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 SUCH DAMAGE.

License: BSD-3-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 .
 * Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
 .
 * Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.
 .
 * Neither the names of Kitware, Inc., the Insight Software Consortium,
   nor the names of their contributors may be used to endorse or promote
   products derived from this software without specific prior written
   permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the "Software"),
 to deal in the Software without restriction, including without limitation
 the rights to use, copy, modify, merge, publish, distribute, sublicense,
 and/or sell copies of the Software, and to permit persons to whom the
 Software is furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included
 in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.

License: GPL-2
 On Debian systems the full text of the GNU General Public License version 2
 can be found in the `/usr/share/common-licenses/GPL-2' file.

License: GPL-2+
 On Debian systems the full text of the GNU General Public License version 2
 can be found in the `/usr/share/common-licenses/GPL-2' file.

License: LGPL
 On Debian systems the full text of the GNU Lesser General Public License
 version 2 can be found in the `/usr/share/common-licenses/LGPL-2' file.

License: LGPL-2
 On Debian systems the full text of the GNU Lesser General Public License
 version 2 can be found in the `/usr/share/common-licenses/LGPL-2' file.

License: LGPL-2.1+
 On Debian systems the full text of the GNU Lesser General Public License
 version 2.1 can be found in the `/usr/share/common-licenses/LGPL-2.1' file.

License: MPL-1.1
 On Debian systems the full text of the MPL 1.1 can be found in
 the `/usr/share/common-licenses/MPL-1.1' file.

License: CC0-1.0
 On Debian systems the full text of the Creative Commons CC0 1.0 Universal
 license can be found in the `/usr/share/common-licenses/CC0-1.0` file.

License: CC-BY-3.0
 On Debian systems the full text of the Creative Commons 3.0 Attribution
 license can be found in the `/usr/share/common-licenses/CC-BY-3.0` file.

DFSG Assistant LLM REVIEW 1 blocker, 0 important, 4 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for navit version 0.5.7+dfsg-0.1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: No
Packaging is of good quality: Yes
Issues: 1 blocker, 0 important, 4 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: 250 found (208 not listed by the scan, so not checked)

Licensing

Every part of the tree is under a free licence and the combination is compatible: GPL-2 for the program, LGPL-2 for the API headers listed in COPYING, CC0/CC-BY-3.0 for the icons, Expat-or-LGPL for the embedded shapelib, BSD-2-clause for support/fib, Apache-2.0 for the two Android files, MPL-1.1/GPL-2+/LGPL-2.1+ for browserplugin.c, and the Geo::OSM Perl modules correctly separated into GPL-2+ and LGPL-2 stanzas. No non-free terms exist anywhere in the tree. debian/copyright is nevertheless inaccurate in one substantial respect: the Files: navit/*.h stanza claims LGPL-2 for every header under navit/, while a dozen top-level headers and (because the pattern crosses /) the headers of the built plugins state GPL-2 version 2 only, and eight more headers state no licence at all.

Packaging

The packaging is in good shape: compat 14, 3.0 (quilt), hardening=+all, a correct binary split, all build dependencies satisfiable, patches with DEP-3 headers (both obsolete cross-build and PATH_MAX fixes still apply), no maintainer scripts to get wrong, and ubuntu/experimental NMU changelog that closes the bugs it claims. The remaining points are minor: two descriptions that still advertise the GTK+/SDL UIs that are no longer built (and call the Qt graphics plugin a GTK+ GUI), the system configuration file /etc/navit/navit.xml is not a conffile, and the map driver builds its own copy of shapelib although Debian ships libshp-dev.

Issues

blocker licensing 1. Files: navit/*.h declares LGPL-2 for headers that are GPL-2 only or state no licence ◂

Files: debian/copyright, navit/geom.h:6, navit/bookmarks.h:6, navit/command.h:6, navit/announcement.h:6, navit/messages.h:6, navit/navit_lfs.h:7, navit/roadprofile.h:6, navit/search_houseno_interpol.h:6, navit/start_real.h:6, navit/vehicleprofile.h:6, navit/window.h:6, navit/graphics/qt5/graphics_qt5.h:6, navit/graphics/qt5/event_qt5.h:6, navit/graphics/qt5/QNavitQuick.h:6, navit/graphics/qt5/QNavitWidget.h:6, navit/gui/gtk/gui_gtk.h:6, navit/attr_type_def.h, navit/cache.h, navit/config_.h, navit/event_glib.h, navit/item_type_def.h, navit/keys.h, navit/navit_nls.h, navit/android.h
Basis: checked, in the package or with a reference tool
Evidence: debian/copyright: Files: navit/*.h / License: LGPL-2. navit/geom.h:6: modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. (no "or any later version"). Same text in the ten other top-level headers listed and in navit/graphics/qt5/{graphics_qt5,event_qt5,QNavitQuick,QNavitWidget}.h and navit/gui/gtk/gui_gtk.h; navit/attr_type_def.h, cache.h, config_.h, event_glib.h, item_type_def.h, keys.h, navit_nls.h and android.h have no licence statement at all. COPYING lists only 54 headers under "GNU Library General Public License".
Problem: A Files pattern is anchored at the top of the tree and its * matches / too (copyright-format 1.0 §6.9), so navit/*.h also matches every header below navit/ that no later stanza overrides; the later navit/support/shapefile/* and navit/support/fib/* stanzas do override theirs, the plugin headers are not. For those files debian/copyright grants LGPL-2 where upstream grants GPL-2 only, or grants nothing beyond the project's blanket GPL-2 in COPYRIGHT. A more permissive licence than the authors gave is not Debian's to state, and several of these headers (geom.h and friends via libnavit_core.so, the graphics/qt5 and internal-GUI headers) are compiled into binaries that Debian ships. An inaccurate debian/copyright is a blocker.
Fix: Restrict the stanza to the headers that really carry the LGPL header - exactly the list under "GNU Library General Public License" in COPYING (navit/attr.h ... navit/zipfile.h), e.g. by naming them or by moving the GPL-2 headers into their own stanza - and let the rest fall under Files: * GPL-2. Note in a Comment that the project's blanket licence is GPL-2 v2 only, since neither COPYING nor COPYRIGHT offers "or any later version".

minor licensing 2. Files: * does not name the Free Software Foundation as holder of the shipped GPL-2 and LGPL-2 texts ◂

Files: debian/copyright, GPL-2:4, LGPL-2:4
Basis: checked, in the package or with a reference tool
Evidence: GPL-2:4 Copyright (C) 1989, 1991 Free Software Foundation, Inc.,; LGPL-2:4 Copyright (C) 1991 Free Software Foundation, Inc.; debian/copyright has only Files: * / Copyright: 2005-2026 Navit Team.
Problem: GPL-2 and LGPL-2 are the verbatim licence texts (COPYING points at them) and their own copyright notice is not covered by any stanza. Debian Policy 2.3 only requires a notice in debian/copyright for files distributed in a binary package in source or compiled form: these are not installed by any package (debian/navit.docs installs only AUTHORS and README.md) and they are distributed as plain text with the FSF notice still in them, so Policy does not require the entry. The DFSG team's author check still asks for a complete file, hence minor rather than nothing.
Fix: Add a stanza Files: GPL-2 / LGPL-2 / Copyright: 1989, 1991 Free Software Foundation, Inc. / License: GPL-2 (the texts state that verbatim copying is permitted), or mention the FSF in the Files: * Copyright field.

minor packaging 3. Descriptions still advertise the removed GTK+/SDL GUIs, and navit-graphics-qt calls itself a GTK+ GUI ◂

Files: debian/control:100, debian/control:23
Basis: checked, in the package or with a reference tool
Evidence: Package: navit-graphics-qt ... Description: Car navigation system with routing engine - GTK+ GUI ... This package contains the Qt Graphics plugin. and, in all five descriptions, The GTK+ or SDL user interfaces are designed to work well with touch screen displays. debian/rules has -Dgraphics/sdl=FALSE, -Dgraphics/gtk_drawing_area=FALSE, and no GTK development package is in Build-Depends (CMakeLists.txt:432 enables gui/gtk only if(GTK2_FOUND)).
Problem: The short description of navit-graphics-qt is self-contradictory (GTK+ GUI vs Qt graphics plugin) and every long description names GUIs the package no longer contains, which misleads users searching for a frontend. Descriptions must describe the package as built (Policy §3.4).
Fix: Change the navit-graphics-qt short description to ... - Qt5 graphics plugin and drop the GTK+/SDL sentence from the long descriptions (or reword it to name the internal GUI and the Qt5 graphics).

minor packaging 4. /etc/navit/navit.xml is shipped as an ordinary file, so local edits are lost on upgrade ◂

Files: debian/rules:75-79, debian/navit.install:1
Basis: checked, in the package or with a reference tool
Evidence: debian/rules move $(CURDIR)/debian/tmp/usr/share/navit/navit.xml $(CURDIR)/debian/tmp/etc/navit/; debian/navit.install ships etc/navit; there is no debian/navit.conffiles, and dh_installdeb only installs a maintainer-provided conffiles file (debhelper 14.5, compat 14).
Problem: navit.xml is the configuration the program reads from /etc and that administrators are expected to adapt; Policy §10.7.3 requires that local changes be preserved during a package upgrade, which an ordinary file in /etc does not do - dpkg overwrites it and the administrator's edits are silently gone.
Fix: List the file as a conffile (a debian/navit.conffiles containing /etc/navit/navit.xml), or install it as a template under /usr/share/navit with a postinst that creates /etc/navit/navit.xml only if absent.

minor packaging 5. shapefile map driver builds its own copy of shapelib although Debian ships libshp-dev ◂

Files: navit/support/shapefile/shpopen.c, navit/support/shapefile/CMakeLists.txt:1, CMakeLists.txt:537-541
Basis: checked, in the package or with a reference tool
Evidence: supportlib_add_library(support_shapefile dbfopen.c shpopen.c shptree.c); set(map_shapefile_LIBS "support_shapefile"); debian/rules -Dmap/shapefile=TRUE; the copy is shapelib 1.2-era (headers Copyright (c) 1999, Frank Warmerdam ... 2012-2016, Even Rouault), while Debian has shapelib 1.6.3 (libshp-dev).
Problem: Policy §4.13 asks packages not to include convenience copies of code Debian already provides as a library: the embedded copy is compiled into a shipped plugin, so security fixes to shapelib do not reach navit and the copy will drift further.
Fix: Build the shapefile driver against libshp-dev (its shapefil.h and libshp) instead of navit/support/shapefile, drop the copy from the orig tarball via Files-Excluded/gbp filter, and adjust debian/copyright.

Verified ◂

Licensing evidence collected over the whole tree, directory by directory: root files, cmake/, contrib/, docs/, man/, navit/ (all subdirectories including android, binding, graphics, gui, map, maptool, osd, plugin, script, speech, support, traffic, vehicle, xslt), po/, scripts/, Toolchain/, .github/, .circleci/, gradle/. All 74 navit/*.h headers were read for their licence clause, and every file with a non-Navit copyright holder was checked against debian/copyright.
DFSG: no non-commercial, no-modification, field-of-use or other non-free wording anywhere (the only hit for such wording outside the GPL's own text is GPL-2:151 allowed only for noncommercial distribution, which is part of the licence itself). Every licence combined in one binary is compatible with GPL-2.
The scan's two "proprietary licence wording" hits are false positives: navit/android/src/org/navitproject/navit/NavitVehicle.java:99 and :140 are Android runtime permission checks (ActivityCompat.checkSelfPermission(...) != PackageManager.PERMISSION_GRANTED / Permission is not granted), not licence terms.
The 248 "archives and compressed files" are the gzip-compressed SVG country-flag icons navit/icons/country_*.svgz plus navit/icons/country_.svgz. They are upstream sources, not generated: navit/icons/CMakeLists.txt globs *.svg and *.svgz and converts them with rsvg-convert (debian/rules -DIMAGE_CONVERTER_SVGZ=rsvg-convert, Build-Depends librsvg2-bin), so no missing generator input, and no compressed file is installed as such. They are covered by Files: * GPL-2 (their contents were not inspected - see unconfirmed).
COPYRIGHT states the project-wide default ("Unless stated otherwise, all files are: Copyright 2005 - 2016 Navit Team ... GPLv2"), and COPYING splits the tree into GPL-2 .c files and the LGPL-2 headers; the GPL-2/LGPL-2 stanzas match those clauses including the absence of "or any later version".
The author-check's two "possibly named" entries are the same holder as Files: *: COPYRIGHT:2 Copyright 2005 - 2016 Navit Team (see AUTHORS) and scripts/import_translation.sh:35 echo "# Copyright (C) 2006-${d} The Navit Team", which is a generator that writes the po headers.
Stanzas checked against the files' own headers: navit/support/shapefile/* (Frank Warmerdam, Even Rouault, Expat-or-LGPL), navit/support/fib/* (John-Mark Gurney, BSD-2-clause text reproduced), cmake/FindPROTOBUF_C.cmake (Kitware, Philip Lowman, Esben Mose Hansen; BSD-3 text reproduced), navit/map/garmin/* (Alexander Atanasov, GPL-2), navit/browserplugin.c (MPL-1.1 / GPL-2+ / LGPL-2.1+, declared identically), navit/script/osm/Geo/OSM/* (Jörg Ostertag GPL-2+; Martijn van Oosterhout and Oliver White for the readers; LGPL for APIClient*/Entities*), navit/android/.../NavitCamera.java and NavitSensors.java (Android Open Source Project, Apache-2.0), po/*.po.in (The Navit Team, GPL-2), man/navit.1 and man/maptool.1 (no separate notice, project default).
Icon licensing checked against the files' RDF metadata: navit/icons/.svg and navit/textures/.svg carry cc:license ... publicdomain/zero/1.0; navit/icons/hotel.svg is from picol.org under CC-BY-3.0 (attribution requirement met by the stanza); navit/icons/gui*.svg fall under the GPL-2 GNOME-icon stanza; contrib/cursor/navitcursor.svg is CC0 with creator jfitie@gmail.com, as declared. No cc-by-sa material remains (the navit/xpm icons mentioned in debian/README.source are gone).
Apple-derived leftovers kept in the tree (navit/graphics/cocoa/graphics_cocoa.m, navit/vehicle/iphone/, navit/speech/iphone/) were read: except for the hand-written interface stub navit/speech/iphone/VSSpeechSynthesizer.h they carry the Navit GPL-2 header, and none is built by this packaging; the stub is covered by the project default.
debian/copyright is in DEP-5 format with the current Format URL, so no replacement file was drafted. Its Files-Excluded list agrees with the import filter in debian/gbp.conf, and every listed path is absent from the tarball (no fastlane, gradle-wrapper.jar, navit/fonts, navit/iphone, navit/graphics/win32, navit/support/{espeak,ezxml,gettext_intl,glib,libc,libpng,win32,wordexp,xgetopt,zlib}, navit/tools/gpx2navit_txt).
Packaging files read in full: control, rules, changelog (top entries), copyright, source/format, gbp.conf, README.source, README.Debian, navit-data.NEWS, and every .install/.docs/.manpages file, plus patches {path_max,dpkg-cross.patch,system-espeak.patch} and series. No debian/tests, no maintainer scripts, no debian/upstream/metadata.
Build dependencies: every name in Build-Depends exists in the archive (checked freeglut3-dev, libshp-dev; the rest are long-standing). GLib headers, which the tree needs since navit/support/glib was excluded, arrive through libgeoclue-2-dev, so their absence from Build-Depends does not break the build; gui/gtk is built only if(GTK2_FOUND) (CMakeLists.txt:432), which the removal of libgtk2.0-dev correctly turns off. Standards-Version 4.7.4 against the reviewing system's Policy 4.7.4.1 is current, and the debhelper-compat (= 14) packaging needs no explicit ${misc:Depends} beyond what dh_gencontrol adds.
uscan found the packaged version as the newest upstream release (upstream 0.5.7, packaged 0.5.7+dfsg).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0, CC-BY-3.0, CC0-1.0, GPL-2, LGPL-2, LGPL-2.1, MPL-1.1).

Not confirmed ◂

The contents of the 248 navit/icons/country_*.svgz flag icons were not inspected (they are gzip-compressed binary files). They are shipped under the project-wide GPL-2; if any of them carries a third-party attribution inside, debian/copyright would not show it.
The provenance of the images under docs/ (about 150 .png/.jpg/.gif/.svg screenshots) and of scripts/pointer-64.png could not be established without opening binary files; docs/ is not installed (debian/navit.docs installs AUTHORS and README.md), so Policy 2.3 does not require their notices, but no third-party holder could be ruled out.
Whether the dh_missing cleanup in debian/navit.install covers everything the build installs could not be verified without building; the .install files and the CMake install rules were read and are consistent with each other.
debian/watch looks at github.com/navit-gps/@package@, but the Source field of debian/copyright names github.com/navit-gps/navit. Whether these are the same upstream was not checked.
debian/watch looks at github.com/navit-gps/@package@, but Repository in debian/upstream/metadata names github.com/navit-gps/navit. Whether these are the same upstream was not checked.

Proposed changes ◂

None.

Uploader's response to the LLM review

Waiting for the uploader's response until 2026-11-15 20:27 UTC, because the review found serious issues.

Back to Dashboard | View all reviews for this package