Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: cyclonedx-bom
Upstream-Contact:
 Steve Springett <steve.springett@owasp.org>
 Amy Keibler <3483663+amy-keibler@users.noreply.github.com>
 Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
Source: https://github.com/CycloneDX/cyclonedx-rust-cargo

Files: *
Copyright:
 FIXME (overlay) UNKNOWN-YEARS Steve Springett <steve.springett@owasp.org>
 FIXME (overlay) UNKNOWN-YEARS Amy Keibler <3483663+amy-keibler@users.noreply.github.com>
 FIXME (overlay) UNKNOWN-YEARS Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
License: Apache-2.0
Comment:
 FIXME (overlay): Since upstream copyright years are not available in
 Cargo.toml, they were extracted from the upstream Git repository. This may not
 be correct information so you should review and fix this before uploading to
 the archive.

Files: debian/*
Copyright:
 2025-2026 Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
 2025-2026 Aeliton Silva <aeliton@aeliton.com>
License: Apache-2.0

License: Apache-2.0
 Debian systems provide the Apache 2.0 license in
 /usr/share/common-licenses/Apache-2.0
