https://bugzilla.redhat.com/show_bug.cgi?id=2368453 --- Comment #5 from Dominik 'Rathann' Mierzejewski <dominik@xxxxxxxxxxxxxx> --- So, after a bit of investigation, it looks like github.com/therootcompany/xz is a fork of github.com/xi2/xz , which is under "public domain" and the fork adds no features, so you could switch to the original and have the issue resolved. As Mike said: dependency is introduced by https://github.com/mholt/archives there is an issue and a PR in the main repo requesting to change to CC0 https://github.com/xi2/xz/issues/10 xi2/xz's "upstream" is PD and BSD0 for new commits https://tukaani.org/xz/embedded.html it could be worth to try to contact github.com/therootcompany/xz and ask if they could move to BSD0 Let me add this: please contact xi2/xz upstream and tell them CC0 is not acceptable for Fedora anymore. -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2368453 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202368453%23c5 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue