Re: How to handle copyright notices in testdata intended for license validation tools?

All of this is just my opinion, of course...

If it were my package, I'd probably do something like this (which could 
list multiple files):

Files: testdata/valid-evidence.json
Copyright: OWASP Foundation
License: Apache-2.0
Comment:
   This file contains strings that are test copyright statements, which
   are being used as a test vector for proper license/copyright parsing.
   They do not correspond to any copyright of this package.

That way, you are really explicit about which files have the issue. If 
you put the comment at the top-level and just say "Several files", it's 
a lot less clear which files you're talking about. You said it was many, 
and I haven't looked at the package itself, so I might do something 
different if it was really a large number that couldn't be covered by 
glob patterns.

I wouldn't copy the fake copyright statements into debian/copyright. 
That feels wrong to me.

-- 
Richard

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmkjzu8ACgkQ+HlhmcBF
hs4q2RAAs7YHrzT8SZ16FaxNUTmRZ7etUhL1VDinCnwaiOFm0pNDv8aqKxv0ovRi
getC8zsKPuvkshaHS5l0YHGKUrwmCl9NMRXi8fOz2nI3c/quKSATZDyLq3U3YG/w
mZ7bsr2LMD0GPY1+okFyCHl8/OBxGpJSPpX2PrLfyWetPnqYUtMCGHnYvbeHTkqb
6Rycb7UPSwmW8YghltQ5XZNkYOhUyr/aqmJGtL7skbWAHJ7icL6I7QAhCFYjLz9y
GhB0F7vWbg8zamgv1VDs8WdnMVAP+viHSSwhNjA/vBiCtyTKLw/JSuSZKv+L+8V8
J5k6ThjsdYLpxLWlzyRZhQ07tnQTXzjTLU1iAy592L0kEirgAnIDyyIiG5d7m642
SFHhzxHgpib0kW+vqa+YZIGdQ55I6W+wH0XGGRRdp7EpT/EehPstmwmxAHtGjnq5
B18ZJjz789tmiI3ipxjQPbZoZ+lPkYDrCzqASdMdSRXF5qyiyrwc94RRadpAYTor
II0IjC9G77Sc2d0NyqRELYwh33daDiqegfBRpvuwKsrST1wNmMAlyxVW6jdksOHu
SmEoCScJVujqxNw6XeBQFDzCsu8Ni/xkI8u9qM9l8ZAGlxtikydKuq0Ixyw/1ofR
cfsF5DfBxoRRdHppSxI2rgFqrgBepr3pUiBblBjU+eZH26pwDaQ=
=EYMr
-----END PGP SIGNATURE-----