The Vcs-* field uses an unencrypted transport protocol for the URI. It is recommended to use a secure transport such as HTTPS for anonymous read-only access.
Note that you can often just exchange e.g. git:// with https:// for repositories. Though, in some cases (bzr's "lp:" or CVS's pserver) it might not be possible to use an alternative url and still have a working (anonymous read-only) repository.
The tag is present in Lintian version
That is the most recent version we know about.
We use semantic versions.
The patch number is a commit step indicator relative to the
release tag in our Git
You can find the detection logic for this version at commit 43a81d7. For merge requests, please use the latest version in the Lintian check fields/vcs.