/me points to http://packages.qa.debian.org/findutils again
(it actually redirects to http://packages.qa.debian.org/f/findutils.html )
Here you can find all the information about the package. Including logs from the build
A package is rebuilt on build servers after it has been submitted by its maintainer. The
maintainer may maintain it in a version control system or may write each and every new
version using butterflies. But once the maintainer uploads the candidate version to Debian, it
gets into the archive. This does not take a centralized VCS.
The package in that example is maintained in a separate subversion repository. It would still
be possible to use that even after other maintainers start using better methods such as
svn2.0, git, bzr and super-duper-future-vcs.
In fact, isn't the input to koji a source RPM?