Dear Maintainer,

It will be really nice to document in README.Source the reason and why some
library are embeded.

It was done in the past, so it could be done

BTW https://salsa.debian.org/security-tracker-team/security-
tracker/raw/master/data/embedded-code-copies is not up to date and a local copy
in your package will help to maintain up to date.

For sqlite it was documented upstream here for instance
https://bugzilla.mozilla.org/show_bug.cgi?id=1611386

Bastien