I have encountered what certainly appears to be a bug in version 3.0.1
of the reuse tool. I am reporting it here because I don't use GitHub
(and thank you for working towards getting REUSE off of it.)
The bug has something to do with having multiple entries in the
.reuse/dep5 file, and spaces in filenames. It manifests as reporting
that the file distribution is REUSE 3.0-compliant when in fact some
files contain no license or copyright information. I have not yet
ascertained whether the flaw is in the debian.copyright library that
loads the dep5 file, or in the reuse code itself.
A nearly minimal example which triggers it can be found here:
Below text by Chris Pressey:
I have encountered what certainly appears to be a bug in version 3.0.1 of the
reuse
tool. I am reporting it here because I don't use GitHub (and thank you for working towards getting REUSE off of it.)The bug has something to do with having multiple entries in the .reuse/dep5 file, and spaces in filenames. It manifests as reporting that the file distribution is REUSE 3.0-compliant when in fact some files contain no license or copyright information. I have not yet ascertained whether the flaw is in the
debian.copyright
library that loads the dep5 file, or in thereuse
code itself.A nearly minimal example which triggers it can be found here:
https://codeberg.org/cpressey/reuse-failure-case
Thank you, -Chris
Upstream bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062437