From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) by sourceware.org (Postfix) with ESMTPS id 791CA3858400 for ; Tue, 11 Oct 2022 20:13:02 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 791CA3858400 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=none smtp.mailfrom=systematicsw.ab.ca Received: from shw-obgw-4004a.ext.cloudfilter.net ([10.228.9.227]) by cmsmtp with ESMTP id iGwDobE9qSp39iLcbomM7z; Tue, 11 Oct 2022 20:13:01 +0000 Received: from [10.0.0.5] ([184.64.124.72]) by cmsmtp with ESMTP id iLcboXZvXlz8piLcbo1dd1; Tue, 11 Oct 2022 20:13:01 +0000 X-Authority-Analysis: v=2.4 cv=VvEwvs6n c=1 sm=1 tr=0 ts=6345ce4d a=oHm12aVswOWz6TMtn9zYKg==:117 a=oHm12aVswOWz6TMtn9zYKg==:17 a=IkcTkHD0fZMA:10 a=NEAV23lmAAAA:8 a=wECf3xPYAAAA:8 a=Z1zZZZ-hAAAA:8 a=vTKmgVtUwdHPXG0_jPIA:9 a=QEXdDO2ut3YA:10 a=ccNonjl4-tybilS9-zgM:22 a=M8gnkfPzeq3WU7S8UTEw:22 Message-ID: Date: Tue, 11 Oct 2022 14:13:00 -0600 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.13.1 From: Brian Inglis Subject: Re: LICENSE values for non-standard OSS licenses Reply-To: cygwin-apps@cygwin.com To: cygwin-apps@cygwin.com References: <20221011083723.5yxsgtgvooxsdx3m@lucy.dinwoodie.org> Content-Language: en-CA Organization: Systematic Software In-Reply-To: <20221011083723.5yxsgtgvooxsdx3m@lucy.dinwoodie.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfJxPgLaOnHYBkt5s/20xH5FR9WhoeA6CxMFjxvJNeqPwzGsEbzVmUvfM0OCbf+YURpcZu4RzhL5Ca2+TleFbW1Qlz3280ZdtswbpKdqhjxCRB2O7OEf9 EWbBaOB8Q/QrKBVWxv44SvHMqAAtzGEMzBiOqfYbc6AhzSrmBHHBoUBz9xCICcSjLcgsvPq888tMZWqXYm5SC4IWNZQ/JB34Q08= X-Spam-Status: No, score=-1165.6 required=5.0 tests=BAYES_00,KAM_DMARC_STATUS,KAM_LAZY_DOMAIN_SECURITY,NICE_REPLY_A,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Tue, 11 Oct 2022 09:37:23 +0100, Adam Dinwoodie wrote: > I'm trying to upload a new version of git-filter-repo, and took the > opportunity to set the LICENSE value in the cygport file. The new value > looks valid according to my reading of the SPDX specification, but is > being rejected by calm. > The license for git-filter-repo is a bit complicated, because different > parts have different licenses, and several of them aren't "normal" > licenses. The license is described at [0] and files referenced / linked > from there. > [0]: https://github.com/newren/git-filter-repo/blob/main/COPYING > I've encoded this as the somewhat verbose > LICENSE='(MIT OR LicenseRef-inherit-git OR LicenseRef-inherit-libgit2) AND (MIT OR LicenseRef-inherit-git OR LicenseRef-inherit-libgit2 OR LicenseRef-inherit-libgit2-examples) AND GPL-2.0-only' > The error I'm getting from calm is as follows: > ``` > ERROR: invalid hints git-filter-repo-2.38.0-1-src.hint > ERROR: package 'git-filter-repo': errors in license expression: ['Unknown license key(s): LicenseRef-inherit-git, LicenseRef-inherit-libgit2, LicenseRef-inherit-libgit2-examples'] > ERROR: errors while parsing hints for package 'git-filter-repo' > ERROR: error parsing /sourceware/cygwin-staging/home/Adam Dinwoodie/noarch/release/git-filter-repo/git-filter-repo-2.38.0-1-src.hint > ERROR: error while reading uploaded arch noarch packages from maintainer Adam Dinwoodie > SUMMARY: 5 ERROR(s) > ``` > So it looks like the issue is the way I've encoded the non-standard > licensing options. "LicenseRef-"(idstring) seems to be the way to > encode this sort scenario, per [1] and [2], but that doesn't seem to be > acceptable to calm. > [1]: https://spdx.github.io/spdx-spec/v2.3/other-licensing-information-detected/ > [2]: https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/ > Are there any suggestions about how to resolve this? I don't think I > can just use the standard license strings: even if we used GPL-2.0-only > in place of LicenseRef-inherit-git -- incorrect as that's the license > *currently* used by Git, but the license for git-filter-repo explicitly > incorporates any future OSS license Git might use -- that still leaves > the problem of LicenseRef-inherit-libgit2, which is currently GPL 2.0 > with an exception that's not covered by any of the SPDX standard > exceptions. > For now I can just remove the LICENSE values to get the build released, > but that seems like a temporary approach at best... To a similar issue of mine in another thread here (search license) Jon replied calm uses: https://github.com/nexB/license-expression produced by the same project/dev as scancode (which scans a codebase to identify licences as part of project AboutCode), which has registered an SPDX namespace for its own LicenceRefs available at: https://scancode-licensedb.aboutcode.org/ which makes me believe Cygwin should use LicenseRef-scancode-public-domain or as referenced there LicenseRef-PublicDomain, and license-expression should be able to use the scancode list. -- La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry