Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/anchore/bubbly
Upstream-Name: bubbly
Upstream-Contact: https://github.com/anchore/bubbly/issues

Files: *
Copyright: 2023-2026 Anchore, Inc.
License: Apache-2.0
Comment:
 Upstream names the holder itself, in a COPYRIGHT file that says
 "Copyright (c) Anchore, Inc.". It was added on 2026-10-12 in
 https://github.com/anchore/bubbly/commit/f8125ce9e7b724fb4e87c0c958e2947adbd9a77d,
 part of the same change across the Anchore repositories that
 https://github.com/anchore/syft/issues/5394 asked for, and the LICENSE
 appendix was left as the Apache-2.0 boilerplate,
 "Copyright [yyyy] [name of copyright owner]".
 .
 That file is not in this release: it landed after 0.2.2 was tagged, so the
 tarball here does not contain it and this comment stands in for it. The first
 upstream release after 2026-10-12 ships the file and this comment can go.
 Upstream states no year, so the range above is this repository's history,
 from its first commit in 2023 to the current release.

Files: debian/*
Copyright: 2026 Maytham Alsudany <maytham@debian.org>
License: Apache-2.0
Comment: Debian packaging is licensed under the same terms as upstream

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
 https://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
Comment:
 On Debian systems, the full text of the Apache license, version 2.0 can be
 found at /usr/share/common-licenses/Apache-2.0