Re: Concerning uniliateral decision making with respect to the coreutils package

Simon Josefsson <[email protected]> Mon, 13 Jul 2026 23:27:36 +0200
Newsgroups gmane.linux.debian.devel.general
Message-ID <[email protected]>
Peter Pentchev <[email protected]> writes:

> On Mon, Jul 13, 2026 at 10:30:44PM +0200, Simon Josefsson wrote:
> [snip]
>> My point earlier in the thread was that by replacing (strongly) copyleft
>> software by non-copyleft software (and I include weak-copyleft in the
>> non-copyleft category) in Debian there is a risk the technical
>> excellence of Debian will be used to subjugate users, and that
>> eventually this could erode the foundation for why Debian is technically
>> excellent in the first place.
> [snip]
>> I think a Debian core without any remaining (enforcable strongly)
>> copyleft components a not unlikely scenario in the next ~10 years.  The
>> move towards that has been happening for many years already, using
>> various arguments including changing to "better software".  bash, gawk,
>> wget, libgcrypt, info, etc.  The market forces are there to promote
>> this.
>
> Not commenting on your general point here, just... again, please stop
> using libgcrypt as an example for that: most of it is weak-copyleft by
> your definition above (LGPL-2.1+), and some of the most-often-executed
> parts (e.g. some SHA-* implementations for amd64) are even under
> a BSD-3-Clause license.

You are right - although I meant gpgv there, not libgcrypt.  The most
sensitive PGP parts is done in gpg(v) not in libgcrypt.  gpg(v) is GPL.

/Simon
signature.asc (application/pgp-signature, 1.2 KB)
-----BEGIN PGP SIGNATURE-----
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=7cEY
-----END PGP SIGNATURE-----