From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 56775 invoked by alias); 3 May 2018 14:55:10 -0000 Mailing-List: contact libffi-discuss-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: libffi-discuss-owner@sourceware.org Received: (qmail 56761 invoked by uid 89); 3 May 2018 14:55:10 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=AWL,BAYES_00,HTML_MESSAGE,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=Organizations, hate, Including, classify X-HELO: mail-lf0-f44.google.com Received: from mail-lf0-f44.google.com (HELO mail-lf0-f44.google.com) (209.85.215.44) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 03 May 2018 14:55:08 +0000 Received: by mail-lf0-f44.google.com with SMTP id h4-v6so26450236lfc.1 for ; Thu, 03 May 2018 07:55:08 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=nN+u8yzk79rOzR8gZog3SKMWaZ51Sl+ZRdHFk7peid0=; b=phr42vwhJ0CnEri7ZgqfuhcRDLqVQHsW7MIdEBKGjSyjIaJ0u/vyuqEOqej6CANX9U QUxcd1rKuyw2LgqOqHQKTw23Iy+S/JoEhgDCYVZpafThNNv9BfVeSK/OFj9YHQCsMsEY sbIVMBp0AkXpBsmlxnVw6zldRfv6B+hpb60qg8ipbAe4p/6hdQNV8DPXV/pZs3Y4tFVa Iqm0C4rCKgPs2zwtbTnGnxIVle2WR47Nbh5bEfh7P6zElACtC7Ahs2C63LDD+I2z5eIJ YqH22EAy5MvpYsuWXUGAoYvpk7SL2MpbBjmtN2dZcIfin0lphBOnuMLfDIY+voYl3H4Q zzTg== X-Gm-Message-State: ALQs6tAPe1hcDmSuMfg46NcUKjiQpDbr17evXavVNVFpl7LqABw3YJY1 MxMp/pMMKeFNpkp2j9pOCOOqSNOjAEzDN5a8TKVjyg== X-Google-Smtp-Source: AB8JxZpr7M/RV4OmKhe1mBx7kh0PgKwiLiVHkImoG5WATLP8m8OzcanojcqQ+QkWvQVlKzluLodYFZ17LZaZHdJOkXQ= X-Received: by 2002:a19:771d:: with SMTP id s29-v6mr14088154lfc.2.1525359306376; Thu, 03 May 2018 07:55:06 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a19:df46:0:0:0:0:0 with HTTP; Thu, 3 May 2018 07:55:05 -0700 (PDT) In-Reply-To: References: <3845804.Kvep2sx6kA@omega> From: Anthony Green Date: Thu, 03 May 2018 14:55:00 -0000 Message-ID: Subject: Re: additional license file in libffi source distribution? To: "Kaz Kylheku (libffi)" <382-725-6798@kylheku.com> Cc: Bruno Haible , libffi-discuss@sourceware.org Content-Type: text/plain; charset="UTF-8" X-IsSubscribed: yes X-SW-Source: 2018/txt/msg00026.txt.bz2 I agree that these license scanning tools are problematic. Fossology is the one I'm familiar with, and it really dumbs things down to the point that it is pretty much useless. I hate the fact that I've even considered removing GPL build-time tools in order to cater to these broken scanners. I've reached out to Fossology a few times, but no response to date. AG On Tue, May 1, 2018 at 12:22 PM, Kaz Kylheku (libffi) < 382-725-6798@kylheku.com> wrote: > On 2018-05-01 05:09, Bruno Haible wrote: > >> Hi Anthony, >> >> msvcc.sh and >>> testsuite/libffi.bhaible are both covered by licensing terms that are >>> different from the libffi license, and that we need to (a) remove them, >>> or >>> (b) include the license text. >>> >> >> Correct. Including the license text is sufficient because >> - build tools like msvcc.sh do not store copyrightable contents in the >> generated binaries, >> - the presence or absence of a test suite does not have an effect on the >> generated binaries. >> > > I think the combination is a bad idea. > > Organizations nowadays use scanning tools to classify the license of > packages. If you have a GPL in there anywhere, the package may be falsely > classified as GPL and people will leave it at that. > > Someone's program will end up being falsely regarded as "radioactive" > because it depends on libffi. > > Nobody is going to manually inspect thousands of packages to pick apart > which one of the included licenses actually applies to the executables. > >