d/copyright says this is License: MPL | GPL | LGPL, but it has actually
been GPL-2+ only since 2014:

https://github.com/rpy2/rpy2/commit/3be5fdb2dddbf2afa7de8210feec59099056bba4

(This bug is RC because https://release.debian.org/testing/rc_policy.txt
requires a correct d/copyright.  Its practical impact may be near-zero
because rpy2 Depends on R itself (i.e. r-base-core), which has always
been GPL-2+ and is correctly marked as such.)

On 14 August 2025 at 16:11, Rebecca N. Palmer wrote:
| Package: python3-rpy2
| Version: 3.5.17-2
| Severity: serious

Well ...

|
| d/copyright says this is License: MPL | GPL | LGPL, but it has actually
| been GPL-2+ only since 2014:
|
| https://github.com/rpy2/rpy2/commit/3be5fdb2dddbf2afa7de8210feec59099056bba4

Please see https://github.com/rpy2/rpy2#license at the very bottom of the
README.md -- it is 'GPL-2 or later' just like R.  (Which drives the FSF
crazy, and at useR! in DC many moons ago invited speaker RMS almost made a
scene over it ...  Anyway.)

| (This bug is RC because https://release.debian.org/testing/rc_policy.txt
| requires a correct d/copyright.  Its practical impact may be near-zero

Yep :)

| because rpy2 Depends on R itself (i.e. r-base-core), which has always
| been GPL-2+ and is correctly marked as such.)

R is actually murky as it also has a few header files explicitly marked
LGPL. But the core is 'GPL-2 || GPL-3' as in 'GPL-2 or greater' and we so far
only have GPL-3.

Please just edit away at debian/copyright as you see fit. It is also likely
still the old non-standardized format.

It's good to have a fresh set of eyes on things.

Cheers, Dirk

On 14 August 2025 at 16:11, Rebecca N. Palmer wrote:
| Package: python3-rpy2
| Version: 3.5.17-2
| Severity: serious

Well ...

|
| d/copyright says this is License: MPL | GPL | LGPL, but it has actually
| been GPL-2+ only since 2014:
|
| https://github.com/rpy2/rpy2/commit/3be5fdb2dddbf2afa7de8210feec59099056bba4

Please see https://github.com/rpy2/rpy2#license at the very bottom of the
README.md -- it is 'GPL-2 or later' just like R.  (Which drives the FSF
crazy, and at useR! in DC many moons ago invited speaker RMS almost made a
scene over it ...  Anyway.)

| (This bug is RC because https://release.debian.org/testing/rc_policy.txt
| requires a correct d/copyright.  Its practical impact may be near-zero

Yep :)

| because rpy2 Depends on R itself (i.e. r-base-core), which has always
| been GPL-2+ and is correctly marked as such.)

R is actually murky as it also has a few header files explicitly marked
LGPL. But the core is 'GPL-2 || GPL-3' as in 'GPL-2 or greater' and we so far
only have GPL-3.

Please just edit away at debian/copyright as you see fit. It is also likely
still the old non-standardized format.

It's good to have a fresh set of eyes on things.

Cheers, Dirk

Fixed in https://salsa.debian.org/rnpalmer-guest/rpy2 (which is my
temporary home for my changes until we work out how to move it to
science-team; it is currently unbuildable because it also contains other
unfinished work, so please do not upload it).

The + is how the new d/copyright format writes 'or later' - I meant
'only' as in not MPL/LGPL.

On 14 August 2025 at 17:17, Rebecca N. Palmer wrote:
| Control: tags -1 patch
|
| Fixed in https://salsa.debian.org/rnpalmer-guest/rpy2 (which is my
| temporary home for my changes until we work out how to move it to
| science-team; it is currently unbuildable because it also contains other
| unfinished work, so please do not upload it).

No worries. I will let you drive (and upload when you think it's ready) but
happy to run a test build / use (once I am back home, currently gone for a
few days),

| On 14/08/2025 16:51, Dirk Eddelbuettel wrote:
| > | d/copyright says this is License: MPL | GPL | LGPL, but it has actually
| > | been GPL-2+ only since 2014:
| > [...]
| > Please see https://github.com/rpy2/rpy2#license at the very bottom of the
| > README.md -- it is 'GPL-2 or later' just like R.
|
| The + is how the new d/copyright format writes 'or later' - I meant
| 'only' as in not MPL/LGPL.

Ack -- I may have misread / did not pay enough attention. All good.

Dirk

We believe that the bug you reported is fixed in the latest version of
rpy2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111088@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Rebecca N. Palmer <rebecca_palmer@zoho.com> (supplier of updated rpy2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 16 Aug 2025 16:04:12 +0100
Source: rpy2
Architecture: source
Version: 3.6.2-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Rebecca N. Palmer <rebecca_palmer@zoho.com>
Closes: 1047971 1106545 1111088
Changes:
 rpy2 (3.6.2-1) experimental; urgency=medium
 .
   * New upstream release.
     - Adapt packaging to continue including rpy2.rinterface/robjects.
     - While upstream is now a namespace package, this is not.
     - Upload to experimental, as this is a risky change.
   * Change of maintainer and Vcs-* URL. (Closes: #1106545)
   * Rewrite d/copyright, as it was incorrect. (Closes: #1111088)
   * Remove obsolete items; do not Suggest non-existent docs package.
   * Add Build-Depends to run more of the tests.
   * Enable Salsa CI.
   * Add autopkgtest.
   * Clean up after build. (Closes: #1047971)
   * Tests: avoid GMT+/-X timezones, as they fail tzlocal, and
     set locale as some tests expect error messages to be in English.
   * Enable bindnow security hardening.
Checksums-Sha1:
 a51fdc966341fc13a5270d6941419a64f7b4cac3 2422 rpy2_3.6.2-1.dsc
 a0da31239991c69c4746a6d7fff2bcf10044d428 1192188 rpy2_3.6.2.orig.tar.xz
 b13727f353ca1624f02d977c972b6601258cf5f2 9996 rpy2_3.6.2-1.debian.tar.xz
 6782dcf96c7f675f94d78e0fec88e9cd8b0defab 6054 rpy2_3.6.2-1_source.buildinfo
Checksums-Sha256:
 a8f6a705150081232b4d799bdc14d5288d09a2df5651f479cd0c9854e8b77d2b 2422 rpy2_3.6.2-1.dsc
 6bb08e50e6dd5a834cd4db2c67cfd413c591210ef0be7e988ad739a0e4424fd4 1192188 rpy2_3.6.2.orig.tar.xz
 2f225c93bb7e230278259334e5111d78fcdc186c0a6e91484e771534b6cfb9fc 9996 rpy2_3.6.2-1.debian.tar.xz
 773674a61a9febab8b827e710d44dfcc69900814ee864841591cddd6e67d93a1 6054 rpy2_3.6.2-1_source.buildinfo
Files:
 3afbf18740b8cc3516b21e2ebd8bccab 2422 python optional rpy2_3.6.2-1.dsc
 da1856cdd2485d2b7876e1296d2eb991 1192188 python optional rpy2_3.6.2.orig.tar.xz
 b54d79ce99f91c220dcafa7b3dfb7f59 9996 python optional rpy2_3.6.2-1.debian.tar.xz
 f9aa1f8ad4fb860a37cac433b939e54f 6054 python optional rpy2_3.6.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=rR29
-----END PGP SIGNATURE-----