sean@sean-asus-linux:~/debian$ lintian -i -I --pedantic garcon_0.4.0-1.dsc
P: garcon source: pre-depends-directly-on-multiarch-support libgarcon-1-0
N:
N: The control file mentions multiarch-support in a Pre-Depends line.
N: Usually multiarch-support is inserted into Pre-Depends via
N: ${misc:Pre-Depends} by dh_makeshlibs. In order to be able to remove the
N: multiarch-support package from glibc without updating every package,
N: Pre-Depends: ${misc:Pre-Depends} should be used instead. Then
N: multiarch-support can be removed by a change in debhelper followed by a
N: binNMU of all affected packages.
N:
N: Severity: pedantic, Certainty: possible
N:
N: Check: control-file, Type: source
N:
P: garcon source: no-dep5-copyright
N:
N: This package does not use a machine-readable debian/copyright file.
N:
N: This format makes it easier to review licenses and can be easily parsed
N: by Lintian.
N:
N: Refer to https://dep.debian.net/deps/dep5/ for details.
N:
N: Severity: pedantic, Certainty: certain
N:
N: Check: source-copyright, Type: source
N:
P: garcon source: debian-watch-may-check-gpg-signature
N:
N: This watch file does not include a means to verify the upstream tarball
N: using cryptographic signature.
N:
N: If upstream distributions provide such signatures, please use the
N: pgpsigurlmangle options in this watch file's opts= to generate the URL
N: of an upstream GPG signature. This signature is automatically downloaded
N: and verified against a keyring stored in
N: debian/upstream-signing-key.asc.
N:
N: Of course, not all upstreams provide such signatures, but you could
N: request them as a way of verifying that no third party has modified the
N: code against their wishes after the release. Projects such as
N: phpmyadmin, unrealircd, and proftpd have suffered from this kind of
N: attack.
N:
N: Refer to the uscan(1) manual page for details.
N:
N: Severity: pedantic, Certainty: certain
N:
N: Check: watch-file, Type: source
N:
sean@sean-asus-linux:~/debian$ lintian -i -I --pedantic ~/pbuilder/vivid_result/libgarcon-
libgarcon-1-0_0.4.0-1_amd64.deb libgarcon-1-0-dbg_0.4.0-1_amd64.deb libgarcon-1-0-dev_0.4.0-1_amd64.deb libgarcon-common_0.4.0-1_all.deb
sean@sean-asus-linux:~/debian$ lintian -i -I --pedantic ~/pbuilder/vivid_result/libgarcon-1-0_0.4.0-1_amd64.deb
P: libgarcon-1-0: copyright-refers-to-symlink-license usr/share/common-licenses/LGPL
N:
N: The copyright file refers to the versionless symlink in
N: /usr/share/common-licenses for the full text of the GPL, LGPL, or GFDL
N: license. This symlink is updated to point to the latest version of the
N: license when a new one is released. The package appears to allow
N: relicensing under later versions of its license, so this is legally
N: consistent, but it implies that Debian will relicense the package under
N: later versions of those licenses as they're released. It is normally
N: better to point to the version of the license the package references in
N: its license statement.
N:
N: For example, if the package says something like "you may redistribute it
N: and/or modify it under the terms of the GNU General Public License as
N: published by the Free Software Foundation; either version 2, or (at your
N: option) any later version", the debian/copyright file should refer to
N: /usr/share/common-licenses/GPL-2, not /GPL.
N:
N: For packages released under the same terms as Perl, Perl references the
N: GPL version 1, so point to /usr/share/common-licenses/GPL-1.
N:
N: Severity: pedantic, Certainty: possible
N:
N: Check: copyright-file, Type: binary
N: