Package: nautilus
Version: 3.8.2-2
Severity: serious
Dear maintainer,
while packaging Caja from the MATE Desktop project for Debian, I
stumbled over a severe issue with the debian/copyright file of
nautilus and its upstream tarball.
(1) the debian/copyright file is incomplete. Several LGPL-2+ files
from the upstream tarball (libnautilus-extension1a package) are not
covered by debian/copyright.
(2) the upstream source tarball contains a COPYING-DOCS file
(containing a version of the GNU FDL-1.1+ license). This file probably
relates to the docs/ folder in the upstream tarball (it is not quite
clear). These files should not be in Debian as the GNU FDL-1.1+ is not
considered as a DFSG compliant license by the Debian project [1].
For Caja the solutions are:
(for 1) provide a detailled license file, compliant to DEP-5 proposal
(for 2) drop nearly all files found in the docs/ folder (except man pages)
light+love,
Mike