Re: Guidance Needed on Licensing for a Debian Package

Soren Stoutner <[email protected]> Mon, 10 Mar 2025 16:07:53 -0700
Newsgroups gmane.linux.debian.devel.legal
Organization Debian
Message-ID <2949140.FA0FI3ke8A@soren-desktop>
Raul,

On Monday, March 10, 2025 3:26:25 PM MST Raul G wrote:
> Hello again,
> Thank you for pointing me in the right direction.
> 
> I'm amazed by the quantity of Debian documentation and tools available, and
> after an initial pass with 'decopy', I had to manually correct some entries.
> I also grouped the fonts by license type to improve clarity. I would really
> appreciate a final review of my debian/copyright file to ensure it fully
> meets Debian's expectations.
> 
> Link to the copyright text: https://paste.debian.net/1362371/

Your first stanza should be for:

Files: *
Copyright: 2025 Somebody
License: The main license of the project.

This is the main stanza for the project.  All the other stanzas are for exceptions.

The second stanza should be:

Files: debian/*
Copyright: 2025 You
License: Usually you want to make debian/* have the same license as the upstream 
project to make it easy to submit any code back to upstream when needed.

Other stanzas with identical licenses can be combined.  The way a debian/copyright stanza 
works is it says: all of the listed files are released under this license.  One or more of the 
listed copyright entries applies to each file.  You are free to use all of these files under this 
license.  If for some reason you need to relicense all of these files, you will need to contact 
all of the copyright holders listed.  If you only need to relicense some of these files, you 
will need to contact some of the copyright holders listed, but it is up to you to look closely 
at each file to figure out which of the copyright statements apply to the subset of files you 
are interested in.

So, for example, the following are from your example:


Files: Malayalam/Suruma.ttf
Copyright: 2015-2021, Sue Lloyd-Williams, Victor Gaultney, Steve Smith
License: OFL-1.1

Files: Hebrew/*
Copyright: 2016, Gili Levin, Shavit Yaacov (https://alefalefalef.co.il)
License: OFL-1.1


They could be combined into:

Files: Malayalam/Suruma.ttf
       Hebrew/*
Copyright: 2015-2021, Sue Lloyd-Williams, Victor Gaultney, Steve Smith
           2016, Gili Levin, Shavit Yaacov (https://alefalefalef.co.il)
License: OFL-1.1

An example debian/copyright you might find helpful:

https://salsa.debian.org/debian/courier/-/blob/master/debian/copyright?ref_type=heads


Separate from debian/copyright questions, I notice that you have some OFL fonts with 
reserved file names.  This is one of my least favorite licensing scenarios, but it is possible 
to make it work with Debian main.  You might find the documentation I included with the 
fonts-adobe-sourcesans3 package helpful.

https://salsa.debian.org/fonts-team/fonts-adobe-sourcesans3/-/blob/master/debian/
README.Source?ref_type=heads

You might also find the debian/copyright for the fonts-adobe-sourcesans3 package 
interesting.  Because there are Multiple Upstream Tarballs (MUT) combined in this 
package, I chose to create a separate Files: stanza for each one, even though I could have 
combined them because they are under the same license.

-- 
Soren Stoutner
[email protected]
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=F6eO
-----END PGP SIGNATURE-----