Hello, I have a grey-area issue. The new version of the clementine player comes bundled with 3rd party source files: sha2 [1], echoprint-codegen [2]. There are no licensing issues. Unfortunately, neither of the two upstreams provide their source files as libraries. From the descriptions in their webpages [1] and [2], they seem to me as "take this code and use it in your project as you wish". The question is, how do you think this would play with our guidelines? Thanks, Orcan PS: A similar question arose during the package review of clementine for the bundled universalchardet source files. At the time, we allowed it through noting that there were other packages in Fedora bundling universalchardet sources. [1] http://www.aarongifford.com/computers/sha.html [2] https://github.com/echonest/echoprint-codegen -- packaging mailing list packaging@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/packaging