From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-yw1-f173.google.com (mail-yw1-f173.google.com [209.85.128.173]) by sourceware.org (Postfix) with ESMTPS id 9B77F3858D20 for ; Fri, 11 Aug 2023 22:18:38 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 9B77F3858D20 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=rtems.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-586bacac98aso26162317b3.2 for ; Fri, 11 Aug 2023 15:18:38 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1691792318; x=1692397118; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=PEdUO5CQGI0QDZm7wI6EwLtsDsq8w1wyijs0oNZBu+Q=; b=Uv0QhhKOLpblnZHRM74zlQAd99L6SyczXmHf74Oat6HnOXvZGWxVFLRVivgi17Gh5q qepoFXUPrZWAWri937MgO77qZHUzIAp3UC9C7cYbbX5f0DOJKlvgBXBcnEbmCvwC1rN3 gZdWHxps9MfMxMVPeImwWXco38wVMCYCsUeZ94iJQfX8to7Z6lljmE4Dw2ESnsR5iAKS wsexYK7uZlUspQpQtOqbLxiKaJNcysSWsP8RVoVKogctc9qerEyMqwIFc8V62tQDysoP VpKPtOxzN3t2Xwe+BeGQc7hSZ/OHuP0nA0fcnoWgTlpxkctv7aEgfFTBf0u4RZkL/qGt Xy+Q== X-Gm-Message-State: AOJu0Yw+pGd2/ZZR6GVFD3+wbjvHulr3b0w3Tgf6D3cwillV7ylg2BaQ qBwFKw3lnjcIbdtdH+7zwDLJMe2Xqls= X-Google-Smtp-Source: AGHT+IFZ+GEXqc9dLZ60p6sUOyD89brv5Ze8yLDWwVBxa4zhsDmIvAyvJCKeYokbRo9JuXDsOulYMQ== X-Received: by 2002:a81:6f43:0:b0:589:d8e1:686d with SMTP id k64-20020a816f43000000b00589d8e1686dmr24700ywc.1.1691792317673; Fri, 11 Aug 2023 15:18:37 -0700 (PDT) Received: from mail-yb1-f170.google.com (mail-yb1-f170.google.com. [209.85.219.170]) by smtp.gmail.com with ESMTPSA id z20-20020a81c214000000b0058038e6609csm1246847ywc.74.2023.08.11.15.18.36 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 11 Aug 2023 15:18:37 -0700 (PDT) Received: by mail-yb1-f170.google.com with SMTP id 3f1490d57ef6-d62ae3fc7f1so2194451276.2 for ; Fri, 11 Aug 2023 15:18:36 -0700 (PDT) X-Received: by 2002:a5b:403:0:b0:d18:5c77:9f2a with SMTP id m3-20020a5b0403000000b00d185c779f2amr2129288ybp.65.1691792316669; Fri, 11 Aug 2023 15:18:36 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: Reply-To: joel@rtems.org From: Joel Sherrill Date: Fri, 11 Aug 2023 17:18:24 -0500 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: (was: Newlib copyright review) and SPDX tagging to REUSE spec RFC To: newlib@sourceware.org Cc: John Scott Content-Type: multipart/alternative; boundary="00000000000011a7cd0602ad18a3" X-Spam-Status: No, score=-3031.3 required=5.0 tests=BAYES_00,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_DMARC_STATUS,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: --00000000000011a7cd0602ad18a3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Aug 11, 2023 at 1:23=E2=80=AFPM Brian Inglis = wrote: > On 2023-08-11 06:14, John Scott wrote: > > I'm re-doing the packaging of Newlib for Debian, and that means I'm > doing a full-blown copyright review where I'm recording the copyright > holders and license terms for every last file. It would be a shame if fol= ks > in other distros had to duplicate my effort. I was thinking, if I'm going > to be doing this anyway perhaps I can upstream my efforts and make Newlib > comply with the REUSE specification? > > > > If you haven't heard of it, REUSE uses SPDX-FileCopyrightText and > SPDX-License-Identifier to make all the copyright and license information > machine-readable. It's a specification from the Free Software Foundation > Europe. If you're okay with me doing this, please let me know whether you > want these tags to replace the existing copyright and license notices, or > to be in addition to them and tagged on to what's already there. > > > > If you're not interested, please let me know so I know to resume my > efforts in Debian. But I'm offering to put in all of the work and since > Newlib has so many different copyright holders and licenses it seems like > you could really benefit. > > You may want to resend this as a newlib RFC, similar to my subject change, > adding some of the info below. > > You could provide a few links to REUSE (try web searching that!) and SPDX > materials to explain what you are doing to those who have not yet > encountered > the REUSE and SPDX projects and tools. > > REUSE specifies the outdated 7 year old SPDX 2.1 spec: will newer versions > (currently 2.3) be allowed and supported? > [SPDX are still discussing Data License which is a bone of contention for > commercial contributors, of which there are many in newlib.] > > Are you okay with providing your changes, including any REUSE and SPDX > cataloguing documents you may create which apply to the project, under > some > non-GPL licence attribution, that allows the library to continue to be > used by > contributing and other corps for their commercial purposes? > > Could you please outline any changes that you contemplate making to the > document > tree, such as LICENSES, REUSE, SPDX, etc. directory additions and likely > contents? > > Are you using one of the SPDX tools to match the licence texts, as the > variations in BSD, MIT, and Verbatim licences can be confusing, and even > when it > states a name, it may be called something else by SPDX? > > Could you please document the sources of these tools and how you intend to > use > them? > > What do you plan to do about uncatalogued licence texts: submit them to > SPDX for > review and (re-)naming, and/or just create a LicenseRef-Debian-NAME or > (preferably?) LicenseRef-newlib-NAME or ExceptionRef-newlib-NAME > placeholder? > > Any other considerations from those involved in licensing and cataloguing? > > Would probably be okay if you just added any SPDX-License-Identifier: ... > below > the existing licence text, then folks can see how it goes. > Thanks for the great questions Brian. We have been adding SPDX annotation to RTEMS source code but have not used any tooling yet. I'm hoping to learn from this process. Hopefully Scott doesn't mind educating as the process works through. --joel RTEMS.org > > -- > Take care. Thanks, Brian Inglis Calgary, Alberta, Canada > > La perfection est atteinte Perfection is achieved > non pas lorsqu'il n'y a plus rien =C3=A0 ajouter not when there is no mo= re to > add > mais lorsqu'il n'y a plus rien =C3=A0 retirer but when there is no mo= re to > cut > -- Antoine de Saint-Exup=C3=A9ry > --00000000000011a7cd0602ad18a3--