Upstream epm has had a few releases since 4.2, and has had a new
maintainer for almost three years now:
https://www.msweet.org/blog/2020-11-20-epm-5.0.0.html
https://jimjag.github.io/epm/
https://github.com/jimjag/epm

You may want to consider packaging a newer version (5.0.0 at the time of
this writing).

Cheers!

--- a/debian/watch
+++ b/debian/watch
@@ -4,7 +4,8 @@
  # See uscan(1) for format

  # Compulsory line, this is a version 3 file
-version=3
-
-http://ftp.easysw.com/pub/epm/([\d\.]+)/epm-(.*)-source.tar.gz
-
+version=4
+opts="searchmode=plain,\
+filenamemangle=s%.*/v?@ANY_VERSION@%@PACKAGE@-$1.tar.xz%" \
+https://api.github.com/repos/jimjag/epm/releases?per_page=50 \
+https://api.github.com/repos/[^/]+/[^/]+/tarball/v?@ANY_VERSION@


epm upstream url has been changed hence the updated d/watch.

Here is the patch for d/watch, if anyone is interested to add the patch
and update epm to v5

We believe that the bug you reported is fixed in the latest version of
epm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1051502@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated epm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 25 Jun 2026 09:06:34 +0200
Source: epm
Architecture: source
Version: 5.0.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 1051502
Changes:
 epm (5.0.1-1) unstable; urgency=medium
 .
   [ Andreas Tille ]
   * QA upload.
   * New upstream version
     Closes: #1051502
   * Point Vcs fields to Debian team on Salsa
   * d/copyright: DEP5
   * Standards-Version: 4.7.2 (routine-update)
   * debputy lint --auto-fix (routine-update)
   * Rebase patches to new upstream version
   * Fix installation of docs
   * d/watch: version=5
   * lintian-overrides for embedded-library
     FIXME/TODO for adopterr: care for dynamic linking to system libs
   * Fix timestamp in docs to build reproducibly
 .
   [ Nicolas Schodet ]
   * Autoreconfigure, but use upstream manually written config.h.in
   * Add doc-add-link-target.patch to fix doc build
   * Add fix-doc-install.patch, fixing doc installation
Checksums-Sha1:
 c719ed692d91f4452bd595208a8cd2a36d945be1 1957 epm_5.0.1-1.dsc
 e5e2603edeb87f1daaf1e0b1821b941df1bb1619 2812735 epm_5.0.1.orig.tar.gz
 6d8e2217ad1f9b8f4038f5ac328944fda6cf5979 9084 epm_5.0.1-1.debian.tar.xz
 eff5e3f3b809b496954e1954fd3a013b6c17fd12 9913 epm_5.0.1-1_amd64.buildinfo
Checksums-Sha256:
 c7561d3a07d809e8e96eb65c2421e7e07583c075961f6c7d3d1792157ccc12e3 1957 epm_5.0.1-1.dsc
 4df7652d74b852fce515ed8035ec4de8b20a00ba1390440017fd9699c6b9f0a1 2812735 epm_5.0.1.orig.tar.gz
 268008a38e588c05fff141c6d385e3d10ec32d71df3f625b6a8ae3cc416efb04 9084 epm_5.0.1-1.debian.tar.xz
 d9077ba3294781ece8fc606971ab6231b698d8bb2553091084dd7c8123468841 9913 epm_5.0.1-1_amd64.buildinfo
Files:
 d03d54d73467a960b98cb643b04f0d85 1957 devel optional epm_5.0.1-1.dsc
 befcbd7e2179d8d9f1a862609a3dba87 2812735 devel optional epm_5.0.1.orig.tar.gz
 9bf272509ace604ece0ba91113d83543 9084 devel optional epm_5.0.1-1.debian.tar.xz
 356cb5ff06535d06e0d7cc97c152a1a8 9913 devel optional epm_5.0.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=bJLl
-----END PGP SIGNATURE-----