Re: License compliance in fedora-review

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 1/5/23 19:42, Richard Fontana wrote:
> On Wed, Jan 4, 2023 at 3:12 AM Benson Muite <benson_muite@xxxxxxxxxxxxx> wrote:
>>
>> Maybe there are other well known cases that should be documented and
>> perhaps put in the review tool?
> 
> I would discourage having the review tool attempt to flag license
> compatibility issues. My assumption, based on past experience, is that
> in the vast majority of cases we would conclude after careful (and
> sometimes even quick) analysis that there is no actual issue of
> license incompatibility. So I think having this in the review tool
> will just add mostly unnecessary friction.
With increasing number of licenses, it may be good to start with some
automation where incompatibility has been established.  Checking for
GPL-2.0-only and Apache tags can be automated and a warning given.  This
would just alert the packager.  Checking packages already in Fedora that
need corrections/further analysis are below. Can raise issues for these.
It is possible to write a short script to check for GPL-2.0-only and
Apache license declarations and add this to either rpmlint
(co-maintained by SUSE) or the licensechecker.



imhex
https://src.fedoraproject.org/rpms/imhex/blob/rawhide/f/imhex.spec

Apache-2.0 WITH LLVM-exception not just Apache-2.0


zimlib
https://src.fedoraproject.org/rpms/zimlib/blob/rawhide/f/zimlib.spec
https://github.com/openzim/libzim

Seems to have been updated to GPL-2.0-or-later
https://github.com/openzim/libzim/issues/30


strawberry
https://src.fedoraproject.org/rpms/strawberry/blob/rawhide/f/strawberry.spec
https://github.com/strawberrymusicplayer/strawberry

Seems to mix licenses in one application, probably needs a check


scratch
https://src.fedoraproject.org/rpms/scratch/blob/rawhide/f/scratch.spec
https://github.com/LLK/Scratch_1.4

Installed as one bundle, should be two separate packages for Scratch
and Squeak due to licensing


retroarch
https://src.fedoraproject.org/rpms/retroarch/blob/rawhide/f/retroarch.spec
https://github.com/libretro/RetroArch

Installed as one bundle, one file has GPL2 only license, maybe
rewritten/relicensed?
https://github.com/libretro/RetroArch/blob/master/memory/ngc/ssaram.c


qownnotes
https://src.fedoraproject.org/rpms/qownnotes/blob/rawhide/f/qownnotes.spec

Bundled GPL-2.0-only library and Apache 2.0 patch. One executable.


qmc2
https://src.fedoraproject.org/rpms/qmc2/blob/rawhide/f/qmc2.spec

Bundled Javascript Apache 2.0 library, should be packaged separately


marker
https://src.fedoraproject.org/rpms/marker/blob/rawhide/f/marker.spec
https://github.com/fabiocolacio/Marker

GPL-2.0-only does not seem to apply, mentioned in a Debian packaging file


python3-pyopencl
https://src.fedoraproject.org/rpms/python-pyopencl/blob/rawhide/f/python-pyopencl.spec

Bundled GPL-2.0-only cephes, should be unbundled


phpdoc
https://src.fedoraproject.org/rpms/phpdoc/blob/f37/f/phpdoc.spec

Bundled GPL-2.0-only javascript. Package retired, not available in Rawhide


pgadmin4
https://src.fedoraproject.org/rpms/pgadmin4/blob/rawhide/f/pgadmin4.spec
https://src.fedoraproject.org/rpms/pgadmin4/blob/rawhide/f/pgadmin4-6.18-vendor-licenses.txt

license listing for bundled Javascript seems incorrect


netstandard-targeting-pack-2.1 and other dotnet packages
https://src.fedoraproject.org/rpms/dotnet6.0/blob/rawhide/f/dotnet6.0.spec
https://github.com/dotnet

Licensing may need updating. GPL code seems to be used for tests only:
https://github.com/dotnet/runtime/issues/55072


Java ( 1.8.0, 11, 17, latest)
https://src.fedoraproject.org/rpms/java-1.8.0-openjdk/blob/rawhide/f/java-1.8.0-openjdk.spec#_1414

Assume this has been looked at, since it is a well used package,
but maybe a note should be added to the spec file?


flameshot
https://src.fedoraproject.org/rpms/flameshot/blob/rawhide/f/flameshot.spec

Some files probably need relicensing or replacing


llvm-test-suite
https://src.fedoraproject.org/rpms/llvm-test-suite/blob/rawhide/f/llvm-test-suite.spec

Spec indicates review required
_______________________________________________
legal mailing list -- legal@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to legal-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Gnome Users]     [KDE Users]

  Powered by Linux