Re: Public Record Verification Request: dpkg 1.21.22 amd64 Package Provenance

Andrey Rakhmatullin <[email protected]> Tue, 24 Mar 2026 15:27:38 +0500
Newsgroups	gmane.linux.debian.devel.project
Message-ID	<[email protected]>
On Tue, Mar 24, 2026 at 11:16:21AM +0100, Marilyn Bretherick wrote:
>Dear Guillem Jover and Debian Project,
>I am writing as a member of the public to respectfully request written
>confirmation regarding publicly available information hosted in the
>official Debian package repository at packages.debian.org. I understand
>this repository to constitute a public record maintained under the GNU
>Affero General Public License, version 3 (GNU AGPLv3+).

>My inquiry is grounded in these published
>standards and in the rights granted to me as a recipient of software
>distributed under the GNU AGPLv3+, specifically the rights affirmed under
>Sections 2, 4, and 10 of that license.

>I am making this request solely for personal verification and documentation
>purposes. I am exercising rights expressly granted to me as a recipient of
>software distributed under the GNU AGPLv3+ and as a member of the public
>engaging with a publicly hosted open source repository governed by the
>Debian Policy Manual. I intend to retain any written response as part of my
>permanent personal records.

You may be mistakenly associating Debian and/or dpkg with AGPL but also 
I'm not sure if the listed sections of that license give you rights to 
request all of this information.

You are, of course, free to *ask*. You are even free to copy your 
questions to [email protected] or any other existing or non-existing email 
addresses.

>*CONFIDENTIALITY NOTICE:* This email and any and all accompanying
>Electronically Stored Information (ESI), including all email threads,
>attachments, linked content, and associated metadata, are intended *only*
>for the use of the individual or entity to whom they are addressed. This
>communication *may* contain information that is private, confidential,
>legally privileged, and/or proprietary. *If you are not the intended
>recipient of this communication,* you are hereby notified that any
>unauthorized review, use, disclosure, dissemination, copying, or
>distribution of this message or its contents is prohibited. If you have
>received this communication in error, *please notify the sender. *
>
>*COPYRIGHT AND INTELLECTUAL PROPERTY NOTICE:* The text, attachments, and
>all other content of this email are unpublished literary works and/or
>proprietary information protected by U.S. Copyright Law (17 U.S.C. § 101 et
>seq.) and other applicable intellectual property laws. The sender is the
>sole copyright and intellectual property holder. Unauthorized reproduction,
>distribution, or use of this communication is strictly prohibited. The
>disclosure of this communication does not waive any applicable legal
>privilege. The sender retains all rights and privileges associated with
>this communication and its contents.

Perfect.

-- 
WBR, wRAR
signature.asc (application/pgp-signature, 894 B)