Kevin Kofler wrote: > One more concern I see is that, since CC0 by design does not require > attribution, there is actually no way to know that the package does not > contain unattributed CC0 code that was unilaterally relicensed by a third > party. That is true [1] although the point generalizes to noncompliant but undetected uses of code under other licenses Fedora considers problematic (but which have attribution-like provisions). I think this is probably a fairly small risk, and not a reason not to reclassify CC0 from being fully "allowed". [1] Although I think you can read the CC0 fallback license as not allowing such unilateral relicensing. Richard _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue