fix(inspectors/deb): remove incorrect metadata mapping
Metadata
Current evaluation
Merged fix removing incorrect deb inspector metadata mapping. Eliminates assumptions linking Upstream-Contact and maintainer fields to author info to prevent false positives. Approved by two reviewers, passed CI, and resolves #324.
Suggested action: —
No scores available.
Issue body
We can't assume that the name marked as the `Upstream-Contact` in the
machine-readable copyright file is necessarily the upstream author, so
remove this mapping. The same applies to the mapping from maintainer
to author email. Additionally, these two pieces of information come
from different origins and may be inconsistent, with a name listed as
author with a completely different address listed in `author-email`.
As a general rule we need to be less aggressive in assuming things
when extracting information during inspection, to avoid false positives.
Fixes #324.
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged fix removing incorrect deb inspector metadata mapping. Eliminates assumptions linking Upstream-Contact and maintainer fields to author info to prevent false positives. Approved by two reviewers, passed CI, and resolves #324. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #312 fix(inspectors/deb): check scan return value | fetch-service | merged | Merged a fix for the deb inspector to validate the scan return value. Approved by two reviewers and integrated into the codebase, though the final diff recorded zero lines changed. | |
| #5795 fix: properly ignore source-code field in metadata linter | snapcraft | merged | Merged to resolve issue #5794 by properly ignoring the source-code field in the metadata linter. Approved by two reviewers, passed all CI checks, and verified working. |