DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: styluslabs-write 0.0~20250700+ds1-1~exp20250705

Review Information

rejected — allocated to siretart 1 month, 21 days ago, started 1 month, 21 days ago, completed 1 month, 21 days ago.

Final Comment

found this EULA in the sources: https://github.com/styluslabs/Write/blob/master/scribbleres/eula.txt

that's non-compliant with DFSG. Looking at the rest of the sources, this might an oversight by upstream. In its current form, the ambiguity makes it problematic for Debian. Please work with upstream to get that EULA removed or at least clarified.

Additionally, I found a missing copyright attribution:

nanovgXC/src/fontstash.h
2:// Copyright (c) 2020 Stylus Labs - see LICENSE.txt
4:// Copyright (c) 2013 Mikko Mononen memon@inside.org
538:// Copyright (c) 2008-2010 Bjoern Hoehrmann bjoern@hoehrmann.de

this is at https://github.com/styluslabs/nanovgXC/blob/333ef76a43e8773995076b3f8f568e1df5719518/src/fontstash.h#L541-L542

That points to http://bjoern.hoehrmann.de/utf-8/decoder/dfa/ which requires attribution to Bjorn. Upstream may be in violation with that term as well, I need you to clarify this with upstream and Bjoern Hoerhmann

Back to Dashboard | View all reviews for this package