Re: GPL-3+ licensed test fixture (SVG/metadata) in BSD-3 project

Soren Stoutner <[email protected]> Mon, 16 Mar 2026 12:15:35 -0700
Newsgroups gmane.linux.debian.devel.legal
Organization Debian
Message-ID <4828039.44csPzL39Z@soren-desktop>
On Sunday, March 15, 2026 3:06:12 AM Mountain Standard Time Carl Keinath wrote:
> Hello,
> 
> I have a licensing question regarding a Debian package. The upstream
> project is licensed under BSD-3-Clause. To run autopkgtests, I added a
> minimal cursor theme under debian/tests/. It consists of an SVG image
> and a metadata file (.hl) used as input data by the tests.
> 
> These files are licensed under GPL-3+. During the tests they are
> converted into a compiled theme format (.hlc), which the test binaries
> then read. The files are not part of the upstream source code, are not
> linked into the program, and are not installed in any binary packages.
> 
> Could including these GPL-3+ test data files under debian/tests/
> cause the resulting test binaries, or the source package as a whole,
> to be considered a derivative work of GPL-3+?
> 
> PS: please CC me, as I am not subscribed.

No, I don’t think adding GPL-3+ test data to debian/tests makes the shipped binary 
packages GPL-3+ (if someone is aware of a way that it would make the shipped binary 
packages GPL-3+, please correct me).  It does force everything that runs the Debian tests 
to comply with the GPL-3+, but that is not a problem for Debian, as our testing 
infrastructure handles many GPL-3+ files.

I think you are fine as long as the licensing of these files is correctly identified in debian/
copyright.

-- 
Soren Stoutner
[email protected]
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=ZfSZ
-----END PGP SIGNATURE-----