[Debian-med-packaging] spades_3.6.2+dfsg-1_amd64.changes REJECTED

[Sascha Steinbiss]

Hi Andreas and Afif,

> I’ve worked my way through ext/, which really is a zoo of a lot of
> stuff that should IMHO better be packaged separately or linked to
> Debian’s own copies. Is this necessary now or can we do this later (just
> to get spades out)?
> 
> Another look at src/ is needed IMHO, but I need to go now so maybe later...

Just to keep you updated, I have worked my way through:

  /vagrant/spades/src $ git grep opyrig | grep -v etersbur | cut -f1 -d:

as well and added missing license info to d/copyright. Pushed just now.

Something that caught my eye is that SPades includes a copy of the RSA
MD5 implementation, which contains an advertising clause which is
probably not DFSG compliant. It might be possible to patch the code
similar to [1] (replace with Colin Plumb's free implementation).
Interesting that other packages retain that code (e.g. [2]).

Any comments? If we want to patch can look into this later.

Cheers
Sascha

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=459516
[2] http://sourcesdev.debian.net/copyright/license/ftpmirror/1.96%2Bdfsg-14/


-- 
 The Wellcome Trust Sanger Institute is operated by Genome Research 
 Limited, a charity registered in England with number 1021457 and a 
 company registered in England with number 2742969, whose registered 
 office is 215 Euston Road, London, NW1 2BE.