This is a fetch-restricted EULA package with no clear way of downloading old versions. As such, it is the opposite of what stable tree is -- it requires stable users to always upgrade to the newest version immediately. Furthermore, it requires arch teams to accept an EULA to even test this package. As such, it does not belong in stable tree.
Sounds like a reasonable policy. Please write it down somewhere once more of the QA team than mgorny has actually discussed it.
(In reply to Chris Reffett from comment #1) > Sounds like a reasonable policy. Please write it down somewhere once more of > the QA team than mgorny has actually discussed it. The devmanual defines a stable keyword as follows: "Both the package version and the ebuild are widely tested, known to work and not have any serious issues on the indicated platform." https://devmanual.gentoo.org/keywording/index.html If the package cannot be mirrored, and upstream does not provide an archive of previous versions, then users cannot download the package. Which I would consider a "serious issue". Do we really need a special QA policy in addition to this? Adding QAcanfix keyword. This package should never have been marked stable.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ac29d20a82575da2cd552f13d5eaa8eb527110f4 commit ac29d20a82575da2cd552f13d5eaa8eb527110f4 Author: Michał Górny <mgorny@gentoo.org> AuthorDate: 2018-01-20 09:35:38 +0000 Commit: Michał Górny <mgorny@gentoo.org> CommitDate: 2018-01-21 20:50:29 +0000 dev-libs/device-atlas-api-c: Remove stable keywords This proprietary fetch-restricted package does not provide a way of downloading old (stable) versions. As such, it is not really suitable for stable keywords. Closes: https://bugs.gentoo.org/645092 Closes: https://github.com/gentoo/gentoo/pull/6912 dev-libs/device-atlas-api-c/device-atlas-api-c-2.1.2_p1.ebuild | 2 +- dev-libs/device-atlas-api-c/device-atlas-api-c-2.1.ebuild | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)
