From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from re-prd-fep-044.btinternet.com (mailomta23-re.btinternet.com [213.120.69.116]) by sourceware.org (Postfix) with ESMTPS id 85D633858C62 for ; Fri, 14 Oct 2022 16:28:52 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 85D633858C62 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dronecode.org.uk Authentication-Results: sourceware.org; spf=none smtp.mailfrom=dronecode.org.uk Received: from re-prd-rgout-002.btmx-prd.synchronoss.net ([10.2.54.5]) by re-prd-fep-044.btinternet.com with ESMTP id <20221014162851.QSMP3224.re-prd-fep-044.btinternet.com@re-prd-rgout-002.btmx-prd.synchronoss.net>; Fri, 14 Oct 2022 17:28:51 +0100 Authentication-Results: btinternet.com; auth=pass (PLAIN) smtp.auth=jonturney@btinternet.com; bimi=skipped X-SNCR-Rigid: 613A8DE83E0FA80A X-Originating-IP: [86.139.156.115] X-OWM-Source-IP: 86.139.156.115 (GB) X-OWM-Env-Sender: jonturney@btinternet.com X-VadeSecure-score: verdict=clean score=0/300, class=clean X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedvfedrfeekvddguddtvdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemuceutffkvffkuffjvffgnffgvefqofdpqfgfvfenuceurghilhhouhhtmecufedtudenucesvcftvggtihhpihgvnhhtshculddquddttddmnegoufhushhpvggtthffohhmrghinhculdegledmnecujfgurhepkfffgggfuffvfhfhjggtgfesthejredttdefjeenucfhrhhomheplfhonhcuvfhurhhnvgihuceojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukheqnecuggftrfgrthhtvghrnhepkeeiuefhfeffgeduueeukeduueektdetveevkeeigeeuhefgteevgfevhfejtdeknecuffhomhgrihhnpehgihhthhhusgdrihhonecukfhppeekiedrudefledrudehiedrudduheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhephhgvlhhopegludelvddrudeikedruddruddtiegnpdhinhgvthepkeeirddufeelrdduheeirdduudehpdhmrghilhhfrhhomhepjhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhdpnhgspghrtghpthhtohepvddprhgtphhtthhopegruggrmhesughinhifohhoughivgdrohhrghdprhgtphhtthhopegthihgfihinhdqrghpphhssegthihgfihinhdrtghomh X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean Received: from [192.168.1.106] (86.139.156.115) by re-prd-rgout-002.btmx-prd.synchronoss.net (5.8.716.04) (authenticated as jonturney@btinternet.com) id 613A8DE83E0FA80A; Fri, 14 Oct 2022 17:28:51 +0100 Message-ID: <4c1cddd1-0ff8-39ed-0406-29e47db5aa73@dronecode.org.uk> Date: Fri, 14 Oct 2022 17:28:50 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.3.3 Subject: Re: LICENSE values for non-standard OSS licenses Content-Language: en-GB To: Adam Dinwoodie , "cygwin-apps@cygwin.com" References: <20221011083723.5yxsgtgvooxsdx3m@lucy.dinwoodie.org> From: Jon Turney In-Reply-To: <20221011083723.5yxsgtgvooxsdx3m@lucy.dinwoodie.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-3570.1 required=5.0 tests=BAYES_00,FORGED_SPF_HELO,KAM_DMARC_STATUS,KAM_LAZY_DOMAIN_SECURITY,NICE_REPLY_A,RCVD_IN_BARRACUDACENTRAL,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_NONE,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 11/10/2022 09:37, Adam Dinwoodie wrote: [... > ``` > ERROR: invalid hints git-filter-repo-2.38.0-1-src.hint > ERROR: package 'git-filter-repo': errors in license expression: ['Unknown license key(s): LicenseRef-inherit-git, LicenseRef-inherit-libgit2, LicenseRef-inherit-libgit2-examples'] > ERROR: errors while parsing hints for package 'git-filter-repo' > ERROR: error parsing /sourceware/cygwin-staging/home/Adam Dinwoodie/noarch/release/git-filter-repo/git-filter-repo-2.38.0-1-src.hint > ERROR: error while reading uploaded arch noarch packages from maintainer Adam Dinwoodie > SUMMARY: 5 ERROR(s) > ``` Sigh. Yeah, this isn't working well and is causing people problems, so I've changed this validation failure from an error to a warning, for the moment. I might remove it totally, or revise how it works in the future. > So it looks like the issue is the way I've encoded the non-standard > licensing options. "LicenseRef-"(idstring) seems to be the way to > encode this sort scenario, per [1] and [2], but that doesn't seem to be > acceptable to calm. > > [1]: https://spdx.github.io/spdx-spec/v2.3/other-licensing-information-detected/ > [2]: https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/ That says that anything starting "LicenseRef-" can be used to indicate a license not on the SPDX license list, but I'm not sure where "inherit" comes from? Does this just have a meaning defined in some other distro which uses SPDX license expressions? Since these expressions containing LicenseRef ids don't have a definite meaning, perhaps it would just as good for it to be undefined, which is what omitting it currently indicates. > Are there any suggestions about how to resolve this? I don't think I > can just use the standard license strings: even if we used GPL-2.0-only > in place of LicenseRef-inherit-git -- incorrect as that's the license > *currently* used by Git, but the license for git-filter-repo explicitly > incorporates any future OSS license Git might use -- that still leaves > the problem of LicenseRef-inherit-libgit2, which is currently GPL 2.0 > with an exception that's not covered by any of the SPDX standard > exceptions. > > For now I can just remove the LICENSE values to get the build released, > but that seems like a temporary approach at best... Well, yes, but then "everything is temporary, anyway" :-)