My apologies; after closer inspection I see that dpkg is a false positive. It does match "^Vendor:" but that string occurs inside of a here-document within a section. Will improve the scripting to only look for tags when the rpm parser will be outside of section context.
I did fix the other issues yesterday. On to Group: removal (which will go through the feature process) and to a full check of source URL validity (like we used to have years ago).
- J<