From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from relay.hostedemail.com (smtprelay0012.hostedemail.com [216.40.44.12]) by sourceware.org (Postfix) with ESMTPS id D02DD3865C21 for ; Tue, 28 May 2024 14:37:26 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D02DD3865C21 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=SystematicSw.ab.ca ARC-Filter: OpenARC Filter v1.0.0 sourceware.org D02DD3865C21 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=216.40.44.12 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1716907048; cv=none; b=fDJkuMtG9IpGt2Dj7ldhrgYAY3U2IInLyNLstjbk/uQe/di8X+QaKfB5d3FGe9wjW1cSwadPy2UbPRTxL7HFh2nH3Smrt1BHuYSLJqEhEPp3wob2YorecXDNyp7WxwzTOaQ4mbugOVRXiOtabeEZ4i7xHZ3gI1ojHfwfw00RYEs= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1716907048; c=relaxed/simple; bh=4CkE0+OVcNdSejaSFTpJnUzY2WvR6t1D3UNOrR3w5A4=; h=Message-ID:Date:MIME-Version:From:Subject:To; b=ja3WoM7aLLV4gokTPfTzKxfIj8Yh7xOlwwWt4XG0QJecgHJtuhg7z9dhMKEUmD+Vhub34zmICeBJ4Jwi/A98R422aKT6oRPUHj4jjlvwTys0+nWYIQN8ycvbZOi77W2MLtD4rywbNTwWDgp1AYa29iRYXCGgE2DFZsjT2h2LkgU= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from omf09.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay09.hostedemail.com (Postfix) with ESMTP id 57618805C0 for ; Tue, 28 May 2024 14:37:26 +0000 (UTC) Received: from [HIDDEN] (Authenticated sender: Brian.Inglis@SystematicSW.ab.ca) by omf09.hostedemail.com (Postfix) with ESMTPA id D438020024 for ; Tue, 28 May 2024 14:37:23 +0000 (UTC) Message-ID: <8a6beeda-8f20-487c-8c47-4f025207ede5@SystematicSw.ab.ca> Date: Tue, 28 May 2024 08:37:22 -0600 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Brian Inglis Reply-To: cygwin-apps@cygwin.com Subject: Re: calm: SPDX licence list data update please Content-Language: en-CA To: cygwin-apps@cygwin.com References: <171653873344.529087.69011834517887221@server2.sourceware.org> <12c3554b-0611-49f4-bc94-5da813df7e03@SystematicSW.ab.ca> Organization: Systematic Software In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Server: rspamout02 X-Rspamd-Queue-Id: D438020024 X-Stat-Signature: m4bj9xd1s5um69kpz7gcu379qbzsn95c X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,KAM_DMARC_STATUS,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.6 X-Session-Marker: 427269616E2E496E676C69734053797374656D6174696353572E61622E6361 X-Session-ID: U2FsdGVkX18Li4y2SToKk7GKONMU8VkDG2K768YjqzU= X-HE-Tag: 1716907043-115084 X-HE-Meta: U2FsdGVkX1+/YDPQ+j6x+lgpGeagw0bKOJJXExDDnwKuoi9VSzxuqWBRmlsxSY3fnGUp6F/CERLTv1WGVRILNUX/iyWbClQuxG1Z4M9vbYAtnO910KRmjYG/o/GN2QRcNDpjNr/KKc/QNHUZtNuUkDdHI9QXpmKxB5Z6LfA0tp7Cr0+cVYMVv0mnNCPYn31nhIWtKnwhVVBEAHOYvwXjCqofubjCHWA/wV77O03IgWikp91cw4VDv/KGf5jVnW+miOPgaPTtTKacDY2yiynfgK5vL4XX9gncGPppbiY5JOPPId4L5ryfD0TiJhxWQ8mqi3x1uADmvd/ErF17SaM1tMBiqhR8FQK5 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 2024-05-27 15:15, Jon Turney via Cygwin-apps wrote: > On 24/05/2024 17:08, Brian Inglis via Cygwin-apps wrote: >> Can we please get the SPDX licence list data updated in calm to 3.24 sometime >> if possible as the licences complained about below have been in > > I thought I wrote about this the last time you asked, but obviously not. Thought not, but after recent reminder, not so sure now ;^> > This is not quite straightforward, as the system python on sourceware is > currently python3.6, and the last supported nexB/license-expression on that is > 30.0.0, and moving to a later one has some wrinkles, since various pieces of > interconnected stuff aren't venv'd (yet?). > >> releases for nearly a year since 3.21: >> If not, perhaps I could be of some help if I knew requirements? > > So, there aren't any requirements here except "validate the SPDX license > expression to detect maintainer mistakes and typos". > > It looks like using that python module might have been a mistake. > > I'm not sure why it needs to contain it's own version of the license data, > ideally we'd have something that read the official SPDX data (ratelimited to > once per day or something. It looks like maybe this would possible to do by > feeding our own license list into the module rather than using it's built in > one, but one could hope for this to be built in already...) There have been changes in how to specify exceptions using WITH. > It would also be useful if it could also be taught to accept 'LicenseRef-.*' > identifiers. Ditto ExceptionRef-.* but that and LicenseRef-.* do not seem to be allowed by PEP 639, as they unrealistically expect projects to change existing licences, whereas we have to deal with historical reality like Fedora! > So, suggestions on a different module to use, or patches to make this work > better, or cogent arguments why we should just remove this validation are all > welcome. How about if we delegate licence validation to cygport, as someone recently offered, or as currently done in calm, with current Cygwin python - add licence validation hint to src hint - if not there, calm does it as now? Would we or should we also allow specifying LICENSE_URI (as I have been doing) like PEP 639 license-files, with defaults searched as suggested: "LICEN[CS]E*", "COPYING*", "NOTICE*", "AUTHORS*"? where globs and source paths are allowed as usual in cygport files, and directories may match these paths, implicitly including file entries, but no file *contents* checked, unless we see a need in future, to generate and validate licences. >> You can also now remove the exceptions in calm/fixes.py(licmap): > > Thanks, will do so. Cheers! -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry