Re: GPL-3+ licensed test fixture (SVG/metadata) in BSD-3 project

Mechtilde Stehmann <[email protected]> Mon, 16 Mar 2026 20:47:16 +0100
Newsgroups gmane.linux.debian.devel.legal
Message-ID <[email protected]>
Hello,

Am 16.03.26 um 20:15 schrieb Soren Stoutner:
> On Sunday, March 15, 2026 3:06:12 AM Mountain Standard Time Carl Keinath wrote:
>> Hello,
>>
>> I have a licensing question regarding a Debian package. The upstream
>> project is licensed under BSD-3-Clause. To run autopkgtests, I added a
>> minimal cursor theme under debian/tests/. It consists of an SVG image
>> and a metadata file (.hl) used as input data by the tests.
>>
>> These files are licensed under GPL-3+. During the tests they are
>> converted into a compiled theme format (.hlc), which the test binaries
>> then read. The files are not part of the upstream source code, are not
>> linked into the program, and are not installed in any binary packages.
>>
>> Could including these GPL-3+ test data files under debian/tests/
>> cause the resulting test binaries, or the source package as a whole,
>> to be considered a derivative work of GPL-3+?
>>
>> PS: please CC me, as I am not subscribed.
> 
> No, I don’t think adding GPL-3+ test data to debian/tests makes the shipped binary
> packages GPL-3+ (if someone is aware of a way that it would make the shipped binary
> packages GPL-3+, please correct me).  It does force everything that runs the Debian tests
> to comply with the GPL-3+, but that is not a problem for Debian, as our testing
> infrastructure handles many GPL-3+ files.
> 
> I think you are fine as long as the licensing of these files is correctly identified in debian/
> copyright.

The main question is:

What are the requirements to have a derived work in the sense of the GPL?

What can I put together without having a derived work?
> 

-- 
Mechtilde Stehmann

## PGP encryption welcome
## F0E3 7F3D C87A 4998 2899  39E7 F287 7BBA 141A AD7F
OpenPGP_signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=2Obq
-----END PGP SIGNATURE-----