The source project of this merge request has been removed.
update to 0.16.2 (fork)
For your consideration:
The libid3tag project has been dead for a long time. This switches our package to the tenacityteam/libid3tag fork, which fixes (at least) CVE-2017-11550 but has not seen a whole lot of activity since last year. https://codeberg.org/tenacityteam/libid3tag/commits/branch/main
Considered but not implemented in this change is the use of a PGP-signed git tag with the key 0xF4D83691462F656E. I'm not sure about the consistency of that key being used or if there will ever even be another release.