Comment 2 for bug 2034642

Where is the upstream repo for this package? d/changelog claims that the base version is from git tag "bsp37.0-2.5" but the repo pointed to in d/control (https://source.codeaurora.org/external/autobsps32/arm-trusted-firmware) doesn't exist (in fact the whole source.codeaurora.org site appears to have disappeared according to https://bye.codeaurora.org/), and I can't find that tag in any of the arm-trusted-firmware repos pointed to from that page (the NXP GitHub or QUIC GitLab). Nor does it appear in the repo pointed to by d/watch (which also implies that's incorrect too).