Ok, sure.   I did not check these.

On Mon, Jul 10, 2023, 2:14 PM Ludovic Courtès <ludo@gnu.org> wrote:

> Hi,
>
> Andy Tai <atai@atai.org> skribis:
>
> > * gnu/packages/fvwm.scm (nscde): New variable
>
> [...]
>
> > +              (method url-fetch)
> > +              (uri (string-append
> > +                    "https://github.com/NsCDE/NsCDE/releases/download/"
> > +                    version "/NsCDE-" version ".tar.gz"))
>
> Upon closer inspection, I noticed an unexpected size distribution:
>
> --8<---------------cut here---------------start------------->8---
> $ du -s /tmp/NsCDE-2.3/*|sort -k1 -n
> 0       /tmp/NsCDE-2.3/LICENSE
> 4       /tmp/NsCDE-2.3/autogen.sh
> 4       /tmp/NsCDE-2.3/Makefile.am
> 4       /tmp/NsCDE-2.3/TODO
> 8       /tmp/NsCDE-2.3/README.localization
> 8       /tmp/NsCDE-2.3/README.md
> 16      /tmp/NsCDE-2.3/INSTALL.md
> 20      /tmp/NsCDE-2.3/configure.ac
> 24      /tmp/NsCDE-2.3/patches
> 24      /tmp/NsCDE-2.3/ReleaseNotes.txt
> 28      /tmp/NsCDE-2.3/Makefile.in
> 32      /tmp/NsCDE-2.3/bin
> 32      /tmp/NsCDE-2.3/ChangeLog
> 36      /tmp/NsCDE-2.3/COPYING
> 52      /tmp/NsCDE-2.3/aclocal.m4
> 76      /tmp/NsCDE-2.3/pkg
> 140     /tmp/NsCDE-2.3/ac-aux
> 176     /tmp/NsCDE-2.3/po
> 244     /tmp/NsCDE-2.3/configure
> 328     /tmp/NsCDE-2.3/NsCDE.png
> 496     /tmp/NsCDE-2.3/src
> 556     /tmp/NsCDE-2.3/nscde_tools
> 920     /tmp/NsCDE-2.3/autom4te.cache
> 952     /tmp/NsCDE-2.3/lib
> 5860    /tmp/NsCDE-2.3/doc
> 14016   /tmp/NsCDE-2.3/xdg
> 48712   /tmp/NsCDE-2.3/data
> $ du -s /tmp/NsCDE-2.3/xdg/*|sort -k1 -n
> 4       /tmp/NsCDE-2.3/xdg/Makefile.am
> 8       /tmp/NsCDE-2.3/xdg/xsessions
> 16      /tmp/NsCDE-2.3/xdg/Makefile.in
> 16      /tmp/NsCDE-2.3/xdg/menus
> 84      /tmp/NsCDE-2.3/xdg/applications
> 96      /tmp/NsCDE-2.3/xdg/desktop-directories
> 13788   /tmp/NsCDE-2.3/xdg/icons
> $ du -s /tmp/NsCDE-2.3/data/*|sort -k1 -n
> 4       /tmp/NsCDE-2.3/data/Makefile.am
> 16      /tmp/NsCDE-2.3/data/help
> 20      /tmp/NsCDE-2.3/data/Makefile.in
> 84      /tmp/NsCDE-2.3/data/fontsets
> 312     /tmp/NsCDE-2.3/data/palettes
> 316     /tmp/NsCDE-2.3/data/defaults
> 408     /tmp/NsCDE-2.3/data/fvwm
> 1092    /tmp/NsCDE-2.3/data/fallback
> 1672    /tmp/NsCDE-2.3/data/config_templates
> 4800    /tmp/NsCDE-2.3/data/integration
> 4968    /tmp/NsCDE-2.3/data/icons
> 14968   /tmp/NsCDE-2.3/data/photos
> 20048   /tmp/NsCDE-2.3/data/backdrops
> --8<---------------cut here---------------end--------------->8---
>
> That is, there’s roughly 1 MiB of code for more than 50 MiB of images.
>
> Is GPLv3 really meant to apply to those images?  It might be the intent,
> but that would be a dubious choice since it’s a software license.
>
> So I think it would be worth checking with upstream the provenance and
> licensing of all the artwork here.
>
> WDYT?
>
> Thanks,
> Ludo’.
>