aboutcode-org / aboutcode-org/dejacode

BUG: LicenseRef should not be used with License Exceptions

Offen
#318 8 Kommentare 0 Reaktionen 2 zugewiesene Personen Zugewiesen an @hesa Auf GitHub ansehen
bug design needed HighPriority integration
Vorherrschende Sprache
Python
Sterne
50
Forks
27
Ø Merge
4 Std. 51 Min.
Gemergte PRs (30 T.)
11

Beschreibung

The SPDX team has specified that a non-SPDX-license-list text which is an exception should be identified with a name that starts with `AdditionRef` rather than `LicenseRef`.

So, from the SPDX perspective, this is wrong:
`some-license-key WITH LicenseRef-something-exception`
but this is right:
`some-license-key WITH AdditionRef-something-exception`

There are multiple Active license exceptions in DejaCode with SPDX key starting with "LicenseRef".
Updating them would of course have an impact on the LicenseDB and various ScanCode tools, so such an update is a big deal and would require a fair amount of work and communication/documentation.

I have created a new Query and Report in DejaCode (nexB dataspace) called License Exceptions with "LicenseRef". I am also attaching the .xlsx output from the report to this issue.

The resolution of this conflict requires some discussion.

Note that our current workaround to this problem, which is simply to construct an expression like this using the AND operator

`some-license-key AND LicenseRef-something-exception`

rather than using the operator WITH , gets us through the SPDX validator, but is not really a good long-term sustainable solution, since it avoids compliance with the latest SPDX standard.

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.