From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mout.kundenserver.de (mout.kundenserver.de [217.72.192.74]) by sourceware.org (Postfix) with ESMTPS id B776638582BC for ; Wed, 12 Oct 2022 08:36:06 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org B776638582BC Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=towo.net Authentication-Results: sourceware.org; spf=none smtp.mailfrom=towo.net Received: from [192.168.178.51] ([91.65.247.133]) by mrelayeu.kundenserver.de (mreue109 [212.227.15.183]) with ESMTPSA (Nemesis) id 1MtwQk-1p1I1g3Z9g-00uH8W for ; Wed, 12 Oct 2022 10:36:04 +0200 Message-ID: Date: Wed, 12 Oct 2022 10:36:02 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.13.1 Subject: Re: LICENSE values for non-standard OSS licenses To: cygwin-apps@cygwin.com References: <20221011083723.5yxsgtgvooxsdx3m@lucy.dinwoodie.org> From: Thomas Wolff In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Provags-ID: V03:K1:l/6DrplGHUPl8K+bbVrJmirEVwmj1jqg34Bm8Aq8/vSpWn1xIgS 0LFIRlKT6r9s+E/gqsaUmtOKDhQNzyQxXZ//v63zHISOYp9Pe/6Q/wEZMOWDB6tIOESXSNF YJePx52obDjMco82y5b1YG8HKfE7Q4a4r1p19DE2UCEqe2eT2/N2pvLyS7Ss1d43kmme/Cs 7EzVORg6CMDbmnZJJoP3g== X-UI-Out-Filterresults: notjunk:1;V03:K0:SYDPKb8fFYA=:6JFF4o7nryWEP15UGYRkDE sSv9PMaL8S60yZqRGRjQOCIHtlP+aR2WU8Er5D/pCA+emctMBtD110cZkjdgzGJ9OPDpfWtka qgbaspZA3o+ugKHScEcTwTbtvmGDN9BKPgKG84Q4yxhwz+bMoVATKSauYd3sIN96PAMVjoTpt Ai1LHjlO5pF/8RyDD1vnAo7zwytcTJdyBxPqGRpxfbZ9JSjcO/cQSgwKZN79RgxbUtpWRZ+OK p40cFcS62m0S5YTZWCFArU7kjW8938iSJaScuQ3p/bFyMVAOmjumxP/kbhlusK/qTi3zq0OOm x/XogSmb+91PsKRJwsP64bCwmilhwDg2XdRE6oZI1CaWjhpx4+Ijq9yx8RfEyleyfp3DpZ+tR lX4hnw0QuvwUCIX+wvqcu92TtqjOdLHVZckOCv3H+ixFNNfY20uHpGrDM9ao4frN9y74e3E65 QKKCfh0BVxLPqS387xO73gIJ+cpPo0zrwx5kcXfeijb2ULnnfvjBSumUsx2L2ipYQN+3FR7NW +Tw9gk0924SLu0Y+LSVUSa302Bv9K6oiEd8XQ+eJjcMZDGD6GbcBuRj6CjVtksiosdYl84UH6 VcJ1IHBmru9p7dUibd6cqzcXxPdCJnVhqlE4+jXWU0pdCGIGxNZu0XgcNLsGS6uu1F48F1l1s LOL0alC5E9oNqDIz0Eho0YMWtoxFtU7EmYnQCsW5r8gweXC0auJrrVFsDW8qoxOCVML3KehIW PhPWJnv5AP3Nk6cRSYAyqn/dLfGRbPtnL8mZdq/aZ7KZhbUoyX9xWsCFnC3Fe0a9X/bpdcWPF +t5xGE6 X-Spam-Status: No, score=-0.8 required=5.0 tests=BAYES_00,BODY_8BITS,KAM_DMARC_STATUS,KAM_LAZY_DOMAIN_SECURITY,NICE_REPLY_A,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: Am 11/10/2022 um 22:13 schrieb Brian Inglis: > On Tue, 11 Oct 2022 09:37:23 +0100, Adam Dinwoodie wrote: >> I'm trying to upload a new version of git-filter-repo, and took the >> opportunity to set the LICENSE value in the cygport file.  The new value >> looks valid according to my reading of the SPDX specification, but is >> being rejected by calm. >> The license for git-filter-repo is a bit complicated, because different >> parts have different licenses, and several of them aren't "normal" >> licenses.  The license is described at [0] and files referenced / linked >> from there. >> [0]: https://github.com/newren/git-filter-repo/blob/main/COPYING >> I've encoded this as the somewhat verbose >>     LICENSE='(MIT OR LicenseRef-inherit-git OR >> LicenseRef-inherit-libgit2) AND (MIT OR LicenseRef-inherit-git OR >> LicenseRef-inherit-libgit2 OR LicenseRef-inherit-libgit2-examples) >> AND GPL-2.0-only' From a mere Boolean perspective, this looks redundant and should be simplified to     LICENSE='(MIT OR LicenseRef-inherit-git OR LicenseRef-inherit-libgit2) AND GPL-2.0-only' >> The error I'm getting from calm is as follows: >> ``` >> ERROR: invalid hints git-filter-repo-2.38.0-1-src.hint >> ERROR: package 'git-filter-repo': errors in license expression: >> ['Unknown license key(s): LicenseRef-inherit-git, >> LicenseRef-inherit-libgit2, LicenseRef-inherit-libgit2-examples'] >> ERROR: errors while parsing hints for package 'git-filter-repo' >> ERROR: error parsing /sourceware/cygwin-staging/home/Adam >> Dinwoodie/noarch/release/git-filter-repo/git-filter-repo-2.38.0-1-src.hint >> ERROR: error while reading uploaded arch noarch packages from >> maintainer Adam Dinwoodie >> SUMMARY: 5 ERROR(s) >> ``` >> So it looks like the issue is the way I've encoded the non-standard >> licensing options.  "LicenseRef-"(idstring) seems to be the way to >> encode this sort scenario, per [1] and [2], but that doesn't seem to be >> acceptable to calm. >> [1]: >> https://spdx.github.io/spdx-spec/v2.3/other-licensing-information-detected/ >> [2]: https://spdx.github.io/spdx-spec/v2.3/SPDX-license-expressions/ >> Are there any suggestions about how to resolve this?  I don't think I >> can just use the standard license strings: even if we used GPL-2.0-only >> in place of LicenseRef-inherit-git -- incorrect as that's the license >> *currently* used by Git, but the license for git-filter-repo explicitly >> incorporates any future OSS license Git might use -- that still leaves >> the problem of LicenseRef-inherit-libgit2, which is currently GPL 2.0 >> with an exception that's not covered by any of the SPDX standard >> exceptions. >> For now I can just remove the LICENSE values to get the build released, >> but that seems like a temporary approach at best... > > To a similar issue of mine in another thread here (search license) Jon > replied calm uses: > >     https://github.com/nexB/license-expression > > produced by the same project/dev as scancode (which scans a codebase > to identify licences as part of project AboutCode), which has > registered an SPDX namespace for its own LicenceRefs available at: > >     https://scancode-licensedb.aboutcode.org/ > > which makes me believe Cygwin should use > LicenseRef-scancode-public-domain or as referenced there > LicenseRef-PublicDomain, and license-expression should be able to use > the scancode list. >