Reason: librsvg 2.40-bugs in phabricator are currently reported mostly as upstream, but the C-version of librsvg was depreciated in 2017 (last release 2017, deapreciated 2017, librsvg-developer declares do not use the C-version of librsvg ), and is forever suspended, and bug-reports are closed at librsvg as depreciated. Even @Aklapper wrote in an bug-report: "Please note that 2.40.x is an ancient, unsupported version."
You "cannot" report
- a open-office-bug in libre-office
- a sodipodi-bug in inkscape
- a owncloud-bug in nextcloud
- a C-only-librsvg 2.40-bug in Rust-only-librsvg 2.50
Yes C-only-librsvg 2.40 and Rust-only-librsvg 2.50 have the name and the same place to report bugs, so it is confusing, but it is imho similar to a fork of a project. You can report problems of the fork in the fork, but not of software already fixed in the fork.
But since librsvg-2.40-bugs won't get fixed anymore, it is the responsibilty of the user (WMF and not librsvg) to fix bug or not, which makes librsvg-2.40 as a part of Wikimedia and not any more an upstream-bug.
I would not actively remove upstream in such tasks, but we might should not add upstream any more to librsvg-2.40-bugs.
The reason why I bring it up on phabricator is because of categorizing tasks in wikimedia-svg-rendering, as suggested in T282740.
I'm not a developer so I maybe missed something and I don't know the meaning of upstream that well.